Event banner
Event details
63 Comments
- I realize that Passwordless is the future and a huge focus of the improved Logon experiences in Windows 11 .... however there are many enterprise (and insurance providers) that are requiring Multi-factor Auth. during device sign-in, and it is currently a common compliance requirement. Can we also get an easy way to roll out MFA in Windows Hello for Business? I mean username, password, AND push-based approval with number matching.
We're halfway through today's Windows Security AMA. What is your favorite Windows security feature or capability? What could we add or improve that would help your organization moving forward?
- Live AMA's are a
way for the MS teams to interact DIRECTLY and in real-time with the community! Would be awesome if the various MS teams could do these 'short' 1 hr AMAs more often ... say, quarterly perhaps? (They are a very nice & efficient replacement forum for the former live events that we suspect will never return with the frequency that occurred pre-pandem.)
- How does the new PDE feature work with OneDrive/SPO files? Is it only encrypted on the device? or will it mean files are encrypted on the cloud storage as well?
- can you talk about hardening of security of cookies/tokens/ouath/etc to limit their use (e.g. lateral movement, PtH, etc)
- At the event the other day there was some discussion about mitigation of issues with third-party apps via TVM, even a hint of maybe third-party patching. Will you consider unifying the experience of app install, update, protection, Allow-listing, and ongoing management of vulnerabilities (via MEM or Defender)? Imagine a future where we can install Adobe Reader on Win via MEM, and simultaneously apply an Allow-list policy for that app, and add an update policy.
- Jeffrey_Sutherland
Microsoft
The Microsoft Endpoint Manager (MEM), Microsoft Defender for Endpoint (MDE), and Windows Defender App Control (WDAC) teams are working together to better integrate our technologies exactly to make it easier to deploy and manage apps with strong application control policies. If you are an existing E5 customer, there is a dedicated Customer Connection Program neighborhood focused on Application Control where we discuss our feature plans and get feedback directly from our customers.
- For federated cross-company domains, if the same user has an account in two different companies, are there plans where windows recognizes the user as the same individual and allows the user to execute a program that can action algorithms in both companies?
- Syfuhs was noting you guys are spending alot of time to replace NTLM. What is your vision of the next generation authentication protocols?
- I love the new technology, but there is a "carry-over" from past Windows OS's, which I miss. This may be petty to the level of this discussion, but in Windows 10, I could customize a folder to "carry" a picture on top of it. For me, being hard of seeing, a picture is more readily readable than just the name of the folder. For example, I would go to, "Properties,' then "Customize," and then "Choose a file to show on this folder icon." Then I would choose a picture related to the data in the folder. Why doesn't that work in Windows 11?
- SteveThomasHave you right-clicking the folder, selecting "Show More Options," then selecting "Properties. That should show you the "customize" option you are looking for.
- Hi Steve, Did it work for you? I'm wondering if it's just something I have set incorrectly. That may well be it. Thanks, Steve!
- Another question about AAD Kerberos, How does cloudAP knows which tenant id proxy to choose? where this information is stored? Thanks Dor
- With the new Pluton integrated in to silicon that are coming into the market, I was wondering about how the technology was integrate with the CPU, did you have to develop a new way for the Pluton to talk to the CPU? This must have been a special and complicated achievement for you all
