Microsoft Security Advisory 4056318

Microsoft posted this advisory in the Office 365 Admin message center. https://docs.microsoft.com/en-us/security-updates/securityadvisories/2017/4056318 The advisory wants customers with ...

Azure Active Directory (AAD)

VasilMichev
Jan 26, 2018
Which part of the article are you referring to? The steps in the Lock down access to the AD DS account section detail which objects will have permission ON the account, not to which group it needs to belong.

Fellow MVPs have posted some more detailed instructions on how this should be applied: http://www.expta.com/2017/12/secure-aad-connect-new-build-116540-and.html

https://practical365.com/blog/microsoft-releases-advisory-for-azure-ad-connect-service-account-security-risk/

VasilMichev

MVP

Jan 26, 2018

Which part of the article are you referring to? The steps in the Lock down access to the AD DS account section detail which objects will have permission ON the account, not to which group it needs to belong.

Fellow MVPs have posted some more detailed instructions on how this should be applied: http://www.expta.com/2017/12/secure-aad-connect-new-build-116540-and.html

https://practical365.com/blog/microsoft-releases-advisory-for-azure-ad-connect-service-account-security-risk/

EmyLoanzon
Iron Contributor
Jan 26, 2018
Thank you VasilMichev for these references!

Forum Discussion

Microsoft Security Advisory 4056318