Insider Builds
I have been an avid Microsoft user for many years with only a couple of small issues every now and again. The 6 weeks have been unbelievably stressful and disheartening. I thought trying samples of New Insider builds and enlisting in Azure for some up to date training for myself to help with what I wanted to roll out for my business. This has been the worst experience i have ever been apart of. I now have multiple computers and hardware in disarray but more importantly the loss of time and patience is paramount . I have come to realise the repetitive responses and requests for data collection on feedback or issues is one-sided The amount of user data submissions is not the issue though. It is the assistance from Microsoft regarding issue via portals, help-desk etc. The inclusion of many backend functions for the purpose of better user experience is heavily flawed. Unless end-user inadvertently has or encounters issues in there OS life is good. Heavily automated program tiggers sit through all OS builds for example. One drive. Regardless whether this is declined or removed it will always be running in the background. If you system had been compromised this is a perfect place for root-kit other Malware to spread. Xcopy: A Microsoft background function which has the ability clone and copy 99% of drivers of operating info structure. Can be controlled by ghost script directives or embedded dll to aid malware. Anti-virus or defender find difficulties identifying or distinguishing authentic and re-pro-ducted data. In time this type of incursion can mimic a vast amount of OS functionality. Microsoft OS validity. I have trailed numerous builds with all sharing this characteristic. Invalid or expired software and driver certificates & TPM flaws even after a full clean reset and TPM turned off in bios. Inevitably this can introduce compromised software without end-user knowledge. The impact leads to unauthorised access in many elements of the OS platform especially data access and embedded .dll which can run inline or above elevated authorisation. A lot of this is undetectable. Once embedded in OS and bios this is impossible to clean without expert assistance and can be very costly. For the most part the inclusion of new AI functionality across the OS platform is very welcomed. Unfortunately there are a large amount of bugs to be ironed out especially in the platform navigation. Advice provided via OS AI can be mis-leading or incorrect. .
Moving Microsoft 365 authentication to Entra ID Cloud Auth from On-Prem ADFS
Hi Identity Brain Trust, Assuming this would be the right place for my question as I couldn't find any other hub more relevant for this one. We have several applications configured to be authenticated via ADFS. We are looking to move these gradually to Entra ID Cloud auth and decommission ADFS, eventually. I would like to test out how Microsoft 365 can be moved to Cloud Auth from ADFS for a certain group of people. I have tried to use ADFS migration wizard in Entra but 365 app is not showing in the ADFS Application Migration section of Entra ID. I've read this official guide but still couldn't find how this can be manually done when App Migration section won't have the app appearing there. - https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/migrate-ad-fs-application-overview Appreciate any of your inputs on this one! Kev
Configure Bitlocker on TCG Opal 2 SSD
Is it possible to configure Windows 10 Pro BitLocker to use the hardware encryption built into a TCG Opal 2.0 SSD and a startup PIN? I have previously setup software BitLocker with a startup PIN and hardware BitLocker without a PIN. To configure the two together I installed a new 870 Evo SSD in a separate computer, used Samsung Magician to set SSD security to "security ready to be enabled", moved the SSD to the target computer and performed a fresh Windows 10 pro installation. I then enabled the local computer policy BitLocker setting "Configure use of hardware-based encryption for operating system drives" to prevent software-based encryption and enabled the setting "Require additional authentication at startup" to allow TPM + PIN. However, on beginning BitLocker, an error message appeared stating software encryption is not available because of the registry setting. After reversing the BitLocker hardware setting, software BitLocker with TPM and PIN proceeded as usual. Is it possible to have BitLocker hardware encryption with a PIN?New Blog | Microsoft Ignite 2023 guide to Microsoft Purview and Priva
We are excited for you to join us at Microsoft Ignite! This post is your one-stop for all the Microsoft Purview and Priva sessions and activities we have planned. About Microsoft Ignite Discover the best of what's next in technology, problem-solve with experts, and make global connections. Empower yourself to lead your organization by attending Microsoft Ignite. What: Visit Microsoft Ignite to learn more | Register today | Session Scheduler (now live - register, sign in, and build out your agenda) When: Online: November 15–16, 2023 | In Seattle: November 14–17, 2023 Presenters: Microsoft, MVPs, and community members Twitter & hashtag: @MS_Ignite | #MSIgnite Cost: Attending online is Free | The in-person event in Seattle is sold out. Read the full update here; Microsoft Ignite 2023 | Microsoft Purview and PrivaNew Blog | Utilize Microsoft Learn during exams and discover community in Security.
Leverage Microsoft Learn to help you complete your role-based certification exams. With Microsoft Learn, anyone can master core concepts at their speed and on their schedule. You can now access Microsoft Learn as a resource to help you complete your Microsoft Certification exams. This resource will be available in SC-100, SC-200, SC-300, SC-400, and other role-based exams in all languages. Read the full update here: Utilize Microsoft Learn during exams and discover community in Security. - Microsoft Community HubRegulatory and Compliance Headaches?
Are regulatory and compliance requirements a source of frustration, stress, or uncertainty in your organization? Did you know that Microsoft has a product called Microsoft Compliance Manager (MSCM) that can help alleviate the stress, uncertainty and most importantly risk to your organization? The wait is over! Be a part of the movement that is MSCM and help guide its evolution. Your direct input and feedback is valuable to our teams here at Microsoft. A simple 10-minute survey, click here, can get you started down the road to better regulatory and compliance preparedness! It’s free for 90 days to all E3 and E5 customers, so what are you waiting for! Should you have any questions please reach out to mipcompcxe@microsoft.com. Also don’t forget to tell your teams about the recently published Microsoft Compliance Manager Ninja Training and the free 90 day trial for all customers!Upcoming Security, Compliance, and Identity Training and Certfication webinars - join to learn more!
October 20th and 21st, we have 3 Training Partner webinars focused on Cloud Security with Microsoft Speakers! Sign up now! October 20th: 8AM PT/11AM ET: Learning Tree International, in partnership with Microsoft, is launching a Women In Technology series starting with a Security, Compliance and Identity certifications webinar to help you navigate the four Microsoft SCI tracks, and advance security skills according to your current job role, or the job role you wish to achieve. For registration details, and all future Women In Tech events, visit LearningTree.com/WIT. Oct 20, 2021 10AM PT / 1PM ET: United Training, in partnership with Microsoft Principal Cloud Architect, Kailash Sawant, will be discussing the current state of cybersecurity in the cloud and what you can do to best prepare your cloud environment. Register here: Registration (gotowebinar.com) October 21 at 9AM / 12PM ET: Global Knowledge is offering a webinar focused on Microsoft Security, Compliance, and Identity (SCI). You’ll learn more about the complete portfolio of associate training and certification for Microsoft Security and how it’s designed to meet industry and market needs with roles, skills, and capabilities needed for the job, including specializations, hands-on experience, and practice requirements. Register now.
Using/ Installing ATP with local Active Directory
Hey guys, I would like to use ATP from the Office 365 Business License but the company is using a local AD. Is there a way to use ATP with a local active directory? Found this but I am not quite sure if this would solve the problem. https://docs.microsoft.com/mt-mt/windows/security/threat-protection/microsoft-defender-atp/onboard-offline-machines Some Online sources also suggested to include /sync the local AD with the Azure AD, but it is just one user who would use the ATP. I Also found ATA and Windows Defender but as ATP is included i would prefere that. I am also not quite sure how all the Products stand in connection whith each other. Did anybody did this before or has a clue what the best solution would be?
