Password Security and New NIST Guidelines Special Publication 800-63B

Unfortunately, the topic of passwords is still taken lightly in many areas. The National Institute of Standards and Technology (NIST) provides some guidelines on passwords, as well as alternatives to passwords such as hardware tokens and smart cards, or generally phishing-resistant authentication methods. Microsoft offers an illustrative schema as a graphic here: To operate with …

Microsoft Entra Connect fails after updating Entra-Connect July Update TLS 1.2

A few weeks ago, I wanted to update the previous Azure AD Connect to Microsoft Entra Connect (as usual). Microsoft released a new version (2.3.30.0) in mid-July. Unfortunately, the installation failed, and even reinstalling and troubleshooting initially went thoroughly wrong. Neither password sync nor user sync wanted to work with this version (operating system Windows …

No more password sending via email in M365

A long-overdue decision is finally being implemented. Microsoft has announced that starting from August 30, 2024, they will no longer send passwords for newly created users via email. This feature will be completely discontinued and will no longer be available. I say ‘Very good’. I find the note ‘Admins should use the ‘Print’ option to …

Exchange 2019 / 2016 Security Update March 2024

After releasing CU14 for Exchange Server 2019, the ‘normal’ period for Exchange security patches is still in progress. Here you can find the offical announcement of March Security Patch 2024. As already known before only latest CUs are supported for this security patch. See the download links: Update processes did not change at all, so …