Another policy using this concept with Filter for devices to only target devices/users that should be able to meet the requirements: Require Phishing-resistant MFA only on hybrid joined devices (Entra joined could also be included if appropriate).
CJ
@crh@infosec.exchange
- 64 Followers
- 197 Following
- 1.1K Posts
Sarcastic. Subtle. Curious.
After killing off the beloved X1 Nano, Lenovo has managed to get the X1 Carbon under 1kg.
It quickly becomes quite a day (and night) when a vSAN stretched cluster has simultaneous site outages across all three sites.
NSX Automation Platform deployment is just... ugh. Not nearly automated enough. I see why people say VCF isn't a cohesive platform.
First experience with Ingram backed support is yikes too. Missing basic reading comprehension.
@gmarnin Our devices are still AD bound so the accounts inherit the AD password policy.
@gmarnin Yep, the OS will keep showing it. Same thing if it fails, it’ll prompt again.
@gmarnin Very easy! One user skipped the autofill step for the passkey but emailed us and asked how to fix it. One user ignored the email entirely and asked why there was a notification.
Overall quite a simple rollout.
Security accomplishment of the day: Platform SSO rolled out to all staff Mac users with Secure Enclave (aka WHfB for Mac) method!
AD gurus who have done AD for longer than I have, is there any modern use for the "Support_388945a0" account anymore? I don't believe whatever "Help and Support Services" it was used with exist anymore.
