Microsoft values a hacker's disposable email more than your email linked to Microsoft for 8 years
My Pc was compromised and my session tokens were stolen . I had security info connected with my email and phone number . I also had passkey setup on both my pc (after reset) and my phone . It took one click for the hacker to remove the security features . They setup their own security info and added a disposable email instead of mine . I was somehow able to log in to the account using my pc passkey , as it was already signed in . First I requested to change the hacker's email to my one , which was useless cause the wait time period was 30 days . But in doing so I locked myself out of recovering the account with the mail that notified me that my security info was changed . I went to account recovery which only allowed me to change the password not the email so its still connected to the hacker's email . My frustration is the hacker can 1 click change my forever linked email since accounts creation . But when i try to do so they prevents me to do that stating that "there was recent security information change and the account will not allow for additional change for 30 years" . I opened up "account recovery form" and filled it out , point to be noted there were no fields where I could enter my details of my problem they just ask some basic information . After sometime they send a mail stating provided information is not enough . How am i suppose to provide more information if there are no fields for additional information . I contacted Microsoft agent , they guided me to reply to the account recovery form mail which did not worked as I was not allowed to reply on such email . I contacted Microsoft agent again , this time they told me I will be getting an email with account recovery form and I should mention every details . Well it was the same recovery form I used earlier with limited fields . I still field out the form and after sometime I was mailed by mailto:email address removed for privacy reasons to provide additional details for my identify , I was again requested to submit an account recovery form on https://account.live.com/acsr?cs=1 which was the same link with limited fields to provide information . I proceeded but in the end I was told that I have reached the daily limit for submitting form for this account . Just to be sure I mailed mailto:email address removed for privacy reasons the requested details .
Entra-ID Privileged Identity Management for Groups
We have used PIM for groups to assign certain Azure Security groups to eligible users. For example a group which provides the contributor role to a certain subscription. This group is added in PIM for groups, and eligible users have been assigned to the group, in which they can provide themselves with the privileges if required to do so for maximum 8 hours. However, when we assign a user to a PIM protected group, then there is no way to tell from the user's properties, that the user has been assigned (eligible) to a PIM protected group. Therefore wouldn't it be better to create PIM groups and add the assigned user as a member of a PIM group, and assign the PIM group as eligible to the PIM protected group? Then you would able to see from the Groups list if the user is illegible for any PIM groups.
Authenticator app not working on new phone - old phone with app is gone
Hello Tech Community, I have trouble with my email (hotmail) account. About 12 months ago I downloaded and activated the authenticator app after having hackers trying to enter my hotmail account. A few months ago I changed my phone and I have never been asked for second factor authentication until today (so I did not pay much attention to it as I could see it. The phone number attached is old and have no access to it and that device is long gone too). BIG PROBLEM! I have the app on my new phone but it is not linked to my account (and cannot do a Cloud Recovery). If I try to do anything with my account (forward emails or change anything) it asks me for the authenticator approval/code (that I do not have access to). I am scared about doing something that will log me out of my email (which I still have access to) but cannot make any changes nor log out. Please help. Can I deactivate the authenticator app somehow? or re-set it-up to work again? Can I migrate all my emails to a new account so I do not lose years of information if I get logged out? Can I set the forwarding emails option without having to pass by second facto authentication? Looking forward to hearing from you wise community, Thank youAdding Distributed COM Users group in the built-in groups for AD
I came across this question from one of my connections in my network. "A user was added to the Distributed COM Users group in the https://bit.ly/2U7Zarc however it seems to be doing nothing for allowing that user to access dcom on the servers. Isn't the point of the built-in groups is that they are already defaulted to the correct permissions and setup on object in the AD structure? Is there a way to test? An effective access on an OU with that group was done and it was all denied. Is this the right way to test those particular permissions" I suggested the following: As the added users are not able to access the dcom server. In that case it is good to check the dcom remote access permissions in the component services. Remote access and local access should be enabled. If it is not then any user part of distributed com users group will not be able to access the dcom servers. Let me what are your thoughts on this. Thanks.
