gMSA, dMSA and the Service Account Problem Nobody Solved
Group managed service accounts security rests on two things almost nobody audits: the password retrieval ACL and the forest KDS root key. Fix both.
Read article →
Tag
Identity
14 articles
Entra ID Passkeys: Profiles, Synced Keys and a Rollout Plan
Plan your Entra ID passkey rollout: synced passkeys are supported, profiles control attestation and AAGUIDs, and passkeys are now the default sign-in.
Read article →
Microsoft Is Retiring SMS and Voice MFA: Your Entra ID Migration Plan
Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →
Microsoft Entra Connect 2.6.79.0: Apply the Security Fixes Now — Plus FIDO2 Sign-In for the Wizard
Entra Connect 2.6.79.0 shipped security fixes but was recalled — install 2.6.84.0 instead. Same security fixes, plus a FIDO2 wizard sign-in preview.
Read article →