Forum Discussion
Secure Score - Accounts with non-default Primary Group ID
LiorShapira thank you for your response.
I can't understand why I am getting flagged for the AzureADKerberos account.
Microsoftmicheleariis Thanks for your feedback, this account should not be included, and we are working on a fix. The recommendation will be updated in a couple of days.
LiorShapira Thank you for your response.
I will point out that there are also other recommendations that have already been implemented in my environment, which, however, is reported to me as being executed
-Ensure that user consent for apps that access company data on their behalf is not allowed
-Enable Microsoft Login ID Identity Protection user risk policies
-Ensure that all privileged accounts have the configuration flag "this account is sensitive and cannot be delegated"
+ Enable conditional access policies to block legacy authentication
+Make sure the Password expiration policy is set to Set passwords as never-expiring (recommended)