M365 Monitor action in Safe attachments policy will retire

Microsoft recently announced in the M365 Administration Center notifications that they will be making some adjustments to the paid feature “Safe Attachments.” Specifically, the “Monitor” function will no longer be available. All rules with “Monitor” will be switched to “BLOCK” in February 2025. See Microsoft’s notification for more details: Microsoft Exchange Online Protection (Defender for …

Password Security and New NIST Guidelines Special Publication 800-63B

Unfortunately, the topic of passwords is still taken lightly in many areas. The National Institute of Standards and Technology (NIST) provides some guidelines on passwords, as well as alternatives to passwords such as hardware tokens and smart cards, or generally phishing-resistant authentication methods. Microsoft offers an illustrative schema as a graphic here: To operate with …

Microsoft Entra Connect fails after updating Entra-Connect July Update TLS 1.2

A few weeks ago, I wanted to update the previous Azure AD Connect to Microsoft Entra Connect (as usual). Microsoft released a new version (2.3.30.0) in mid-July. Unfortunately, the installation failed, and even reinstalling and troubleshooting initially went thoroughly wrong. Neither password sync nor user sync wanted to work with this version (operating system Windows …

No more password sending via email in M365

A long-overdue decision is finally being implemented. Microsoft has announced that starting from August 30, 2024, they will no longer send passwords for newly created users via email. This feature will be completely discontinued and will no longer be available. I say ‘Very good’. I find the note ‘Admins should use the ‘Print’ option to …

Find orphaned GPOs via PowerShell before migrating to Intune

Many companies have already fully transitioned to Endpoint Management Intune and no longer need GPOs (Group Policy Objects). Others are in the preparatory stages. Therefore, I would like to provide some assistance for identifying orphaned Group Policy Objects. These can be relatively easily found and, if necessary, removed using PowerShell. I’ve written a small script …