Security + Identity

Users flagged for risk - Azure AD Identity Protection

05-09-2018

We are experiencing the same issue. Did you ever get this resolved?

Jerry Gonzalez in Security + Identity , 07-17-2018

So new to the Azure AD Identity Protection.

So I get the email for Azure AD Identity Protection Weekly Digest. So my user visits Canada and I get the alert and I know he is in Canada, I have confirm it with him and his Admin. Under details, do I mark Reso



26 Views

07-17-2018

I would agree with you that this would be considered a false positive if the user did visit the country noted. I would suggest using "Resolved" if, for example, you foun

Best Response confirmed by Jerry Gonzalez (Occasional Contributor)

Azure Security Center is now integrated into the subscription experience

Eric Starker in Security + Identity , 07-16-2018

Securing your resources is important, which is why we’ve made it even simpler for you to do. Azure Security Center is available in public preview in the subscription experience.

In just a few clicks, you can enable Security Center and quickly assess the



91 Views

Using the extensionAttributes in Active Directory

Dylan Martens in Security + Identity , 12-14-2017

So I'm working on expanding the data stored about User Objects in an Active Directory, but we are looking for possible candidates to store the data in, as a lot of the fields have already been used.

We found the fields 'extensionAttribute(1-15)' and looked



749 Views

12-15-2017

Hi,

You can use extension attributes to store additional data like 'employee ID' etc.

Just document the change, so you know what it was used for.

They will not be

Ryan Heffernan in Security + Identity , 07-10-2018

Do you want early access to a cutting-edge security feature? We’re making our just-in-time VM access feature for Azure Security Center even easier to use and would love your feedback. Now you can seamlessly enable just-in-time access as part of the VM exp



41 Views

ATP sensor installation failed

Alexander Benoit in Security + Identity , 07-04-2018

Hi all,

having trouble with installing the Azure ATP sensor on a Windows Server 2012 R2 x64. Proxy can be reached and sensor even shows up in the console but then installation fails and rollback gets initiated.

Exit Code is: 0x80070643,

There's no AV in



101 Views

07-04-2018

Hi Alexander,

First i was thinking it had with DNS issue.

https://docs.microsoft.com/en-us/azure-advanced-threat-protection/configure-proxy

But i remember also that i ha

Ryan Heffernan in Security + Identity , 07-02-2018

As announced earlier in June, later this year we plan to hold a live event to kick off our Security Customer Advisory Board (CAB) and Partner Advisory Council (PAC) for several of our products: Azure Information Protection, Azure Security Center, Azure AT



61 Views

ATP sensor installation failed

Anderson Lacruz in Security + Identity , 06-21-2018

After several tries in order to install Azure ATP sensor on the first domain controller I get an error about ATP service but without clue what it could be the issue. I reviewed event logs, logs from ATP installation. All pre-requisites are ok. Here some i



142 Views

06-26-2018

@Anderson Lacruz wrote:
After several tries in order to install Azure ATP sensor on the first domain controller I get an error about ATP service but without clue what it c

Eric Starker in Security + Identity , 06-19-2018

Azure Security Center’s dashboard has been redesigned to provide cross-subscription, organizational level reports of the most important metrics that influence the organizational security posture, as well providing actionable insights to help organizations



698 Views

Convert On-Prem AD Users from Office 365/Azure AD to In-Cloud accounts

Paul Bullock in Security + Identity , 02-01-2017

We have currently setup a ADConnect Sync to Office 365, this is working well.

We would like to start converting Sync'ed accounts in Office 365/Azure AD to "In Cloud" accounts. Can you advise or does anyone know how we might approach this? Or can point



14.6K Views

view all 24 replies

02-01-2017

You could terminate the account in Active Directory (which would terminate the account in AAD/O365) after forcing a delta sync, then login to O365 admin center and "react... Read More

We’re forming a Security Customer Advisory Board. Space is limited.

Ryan Heffernan in Security + Identity , 06-07-2018

Later this year, we plan to hold a live event to kick off a Security Customer Advisory Board (CAB) for several of our products (AIP, ASC, Azure ATP, and MCAS). Help us determine what topics we should focus on by taking this survey:

https://aka.ms/SecurityCAB



109 Views

Detecting script-based attacks on Linux

Eric Starker in Security + Identity , 06-06-2018

Last month, we announced the extension of Azure Security Center’s detection for Linux. This post aims to demonstrate how existing Windows detections often have Linux analogs. A specific example of this is the encoding or obfuscation of command-lines.



475 Views

3 reasons why Azure’s infrastructure is secure

Eric Starker in Security + Identity , 05-31-2018

Customers tell us that securing their datacenter infrastructure requires an enormous amount of resources and investments. With the challenges of recruiting security experts to maintain secure infrastructure, there is not a clear return on investment. To



522 Views

Azure Security Center can identify attacks targeting Azure App Service applications

Eric Starker in Security + Identity , 05-31-2018

One of Azure’s most popular service is App Service which enables customers to build and host web applications in the programming language of their choice without managing infrastructure. App Service offers auto-scaling and high availability, supports both



158 Views

Conditional Access Reporting

Anonymous in Security + Identity , 03-28-2018

We are currently evaluating azure ad conditional access as well as identity protection. We have a few temporal instances where a user will receive the message "Your sign-in was successful but does meet the criteria to access the resource". We believe this



268 Views

04-18-2018

In case anyone else comes across this. I spoke with the Azure team, this reporting can only be accessed by them for the time being (in a fairly unreadable format). The re

Ryan Heffernan in Security + Identity , 05-24-2018

Come to our Azure Security Days event in New York City on May 30th or 31st. Our product team from Tel Aviv, Israel will be there, along with our Global Security Advisor team.

At this event you can:

Connect with the experts from Microsoft to get an insi



223 Views

Can we replace existing SSL certificate with new SSL certificate with new SAN entries

amanpreet singh in Security + Identity , 05-23-2018

Hi All,

ADFS is deployed in our environment and SSL certificate has subject alternative name (SAN) entries for required 3 domains:

sts.domain1.com
sts.domain2.com

sts.domain3.com

Can we replace existing SSL certificate with new SSL certificate with 3 more ne



111 Views

Add language-specific company branding to your directory

Christine Stack in Security + Identity , 05-22-2018

We are onboarding our regional office in Montreal to Office 365. I have been playing with custom branding for the French speakers but am unsure if the new sign-in screen will display to them. The only language option in Users and groups > Company brand



110 Views

Azure Enterprise Application - Different Azure Tenant

James Sabia in Security + Identity , 05-21-2018

Is it possible to create an Azure Enterprise Application to provide SSO from my companies Azure Tenant to a remote customers Azure/Office365 Portal?



124 Views

Detect malicious activity using Azure Security Center and Azure Log Analytics

Eric Starker in Security + Identity , 05-17-2018

We have heard from our customers that investigating malicious activity on their systems can be tedious and knowing where to start is challenging. Azure Security Center makes it simple for you to respond to detected threats. It uses built-in behavioral ana



131 Views

Protect virtual machines across different subscriptions with Azure Security Center

Eric Starker in Security + Identity , 05-15-2018

We heard from our customers that they wanted an even simpler onboarding experience to Azure Security Center. Today, we are excited to announce the general availability of Azure Security Center’s Cross Subscription Workspace Selection.

This capability a



245 Views

Why developers should enable Azure Security Center’s Just-in-Time VM Access

Eric Starker in Security + Identity , 05-15-2018

We are seeing more developers building and running their applications in the public cloud. In fact, companies are using multiple public clouds to run their applications. Our customers tell us that they choose to build applications in Azure because it’s ea



115 Views

How can I achieve seamless SSO?

Ivan Unger in Security + Identity , 05-02-2018

Sometime last year I achieved seamless SSO in our corporate environment with the following tools:

Windows 10 Clients
- IE11 (by adding some URLs to the intranet/trusted zones)
- Chrome (with some trickery on ADFS to get this working)
- and generally adding the whr



188 Views

05-09-2018

Hello Ivan,

There are two ways to have seamless SSO with Azure AD:-

1)- Pass-though Seamless SSO.

2)-Password Sync Seamless SSO.

Recently watched a video that has explained

Eric Starker in Security + Identity , 04-24-2018

Azure Security Center (ASC) is now extending its Linux threat detection preview program, both on cloud and on-premise. New capabilities include detection of suspicious processes, suspect login attempts, and anomalous kernel module loads. Security Center i



333 Views