User Profile
BetterLicenses
Brass Contributor
Joined 4 years ago
User Widgets
Recent Discussions
Microsoft will stop basic authentication on October so I built a guide on how to handle it
Although most of the recent tenants don't need to worry about it because by default legacy clients are blocked, I hope it's helpfull for those in the "game for a long time". We had to help users to migrate from Basic Authentication to Modern Authentication so we've made an article on how to do it: https://betterlicenses.com/blog/how-to-migrate-basic-auth-to-modern-auth-microsoft-365 If there are any questions please let me know.A Web App to find all Basic Authentication Devices
On October 1st Microsoft Will start disabling Basic Authentication in Exchange Online (https://betterlicenses.com/blog/how-to-migrate-basic-auth-to-modern-auth-microsoft-365#second_life) so we've designed a https://betterlicenses.com/audit_log. The list includes for iPad/iPhone a column saying if the device is on 15.6 or if it should be updated to https://betterlicenses.com/blog/how-to-migrate-basic-authentication-devices-users-to-modern-authentication#move_iphone. The App will let you know the total number of devices and list the first 10 for free. Nevertheless if you have questions about how to migrate the devices just fire away. https://betterlicenses.com/audit_log https://betterlicenses.com/audit_logMicrosoft just gave tenant admins the option to postpone Basic Auth "turn off" date to December
As most of tenant admins are aware, https://betterlicenses.com/blog/how-to-migrate-basic-auth-to-modern-auth-microsoft-365 (except for SMTP Auth) on October 1st (this has been planned for 2 years already). Recently they've made a blog post informing tenant admins that the "cut off" date can be postponed until December https://betterlicenses.com/blog/how-to-migrate-basic-auth-to-modern-auth-microsoft-365#second_life. If nothing is done by tenant admins legacy clients will still be disabled on October 1st but it's now possible to preemptively delay to December or re-enable them after October 1st. Coming January 2023 there is no way around it, basic authentication will be off.Guide on How to setup Self-Service password reset in Microsoft 365
On some of our tenants we had several users opening the usual support request "I've forgotten my password, can you send me a new one" which in itself can be a security issue because the sender might not be the real user. As such, we tell them to reset the password themselves after making sure Self-Service password reset is configured. So decided to document the process in a recent blog post on https://betterlicenses.com/blog/how-to-enable-microsoft-365-self-service-password-reset. Hope it's useful.A few suggestions to lower Microsoft 365 licensing costs
With the "recent" changes regarding Annual or Monthly Commitment and renaming of the licenses (Office 365 or Microsoft 365) a simple article with a few suggestions on how to optimize tenant licenses might be useful. As such, https://betterlicenses.com/blog/how-to-decrease-microsoft-365-license-costs. They are quite straightforward and probably already known by most, but can still be helpful for some: https://betterlicenses.com/blog/how-to-decrease-microsoft-365-license-costs#business_license_first (there is an example on decreasing the price from 11 500$ to 6 600$ (monthly) https://betterlicenses.com/blog/how-to-decrease-microsoft-365-license-costs#annual_or_monthly and how to view them in the tenant admin. I hope it's useful and let me know if there are any questions or other suggestion on saving license costs.iOS 15.6 update will migrate iPhones on basic authentication to modern authentication
Microsoft is probably foreseeing a lot of support requests so they joined Apple and provided tenant admins a way for iPhones running iOS 15.6 to automatically exchange user credentials for OAuth token, migrating devices from Basic Authentication to Modern Authentication. We've made a https://betterlicenses.com/blog/how-to-migrate-basic-authentication-devices-users-to-modern-authentication#move_iphone on how to do it along with other protocols (IMAP, SMTP) and Microsoft has released a detail post also. This should make things easier not forcing users to re-configure their iPhones Mail Apps accounts to get modern authentication.Re: microsoft 365 vs google workspace?
iftikharf60 A comparison between Microsoft 365 and Google Workspace after March when Microsoft increased the prices. Comparing Business standard and basic with the same offer from Workspace, Google won one category, storage space, lost on the others: https://betterlicenses.com/blog/microsoft-365-vs-google-workspace-new-pricesiOS 15.6 will migrate iPhones on basic authentication to modern authentication
Microsoft is probably foreseeing a lot of support requests so they joined Apple and provided tenant admins a way for iPhones running iOS 15.6 to automatically exchange user credentials for OAuth token, migrating devices from Basic Authentication to Modern Authentication. We've made a https://betterlicenses.com/blog/how-to-migrate-basic-authentication-devices-users-to-modern-authentication#move_iphone on how to do it along with other protocols (IMAP, SMTP) and Microsoft has released a detail post also. This should make things easier not forcing users to re-configure their iPhones Mail Apps accounts to get modern authentication.Check if Microsoft has pre-disabled legacy protocols on your Microsoft 365 tenant
As you probably know, Microsoft will https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online#when-will-this-change-take-place connections on October 1st 2022 and in order to force sys admins to "tackle" the issue upfront they are already temporarily disabling some legacy protocols. Today one of our managed tenants had Exchange ActiveSync disabled by Microsoft which meant support requests by users with iPhones/iPads with "incorrect passwords" errors. We decided to https://betterlicenses.com/blog/iphone-password-error-and-basic-authentication-protocols#diagnose-legacy-protocol were disabled and how to re-enable it before the 48h period is over. Might be helpful.Basic Authentication will end on October so I decided to make a guide on how to handle it
Basic Authentication which doesn't allow for MFA enforcement will be disabled on October 2022, this means smtp, pop,imap and Exchange ActiveSync (used a lot by iPhone) won't work anymore. We helped a few tenants make the move and decided to create a guide , hope it helps: https://betterlicenses.com/blog/how-to-migrate-basic-auth-to-modern-auth-microsoft-365 If there are any questions please feel free to post them. Update: https://www.reddit.com/r/Office365/comments/vid9y7/no_imap_for_48_hours/https://www.reddit.com/r/Office365/comments/vid9y7/no_imap_for_48_hours/ beforehand for a brief period. So if you would like to check if your tenant was affected, https://admin.microsoft.com/AdminPortal/?searchSolutions=Diag:%20Enable%20Basic%20Auth%20in%20EXO#/homepage which will pre-fill a support request (https://betterlicenses.com/images/blog/check-if-any-basic-auth-are-disabled.png) and the solution is a test tool which will check https://betterlicenses.com/images/blog/check-if-any-basic-auth-are-disabled-2.png.Re: Basic Authentication will end on October so I decided to make a guide on how to handle it
biomediqa just added a guide on how to handle different types of devices signing in through basic authentication, might be helpful: https://betterlicenses.com/blog/how-to-migrate-basic-authentication-devices-users-to-modern-authenticationRe: Basic Authentication will end on October so I decided to make a guide on how to handle it
biomediqa Forgot, on our website we have a https://betterlicenses.com/audit_log will tell you what devices users are using and will send you either a daily or weekly reminder of new devices users signed in still on legacy protocols. More info on a https://www.reddit.com/r/Office365/comments/v3z5q9/microsoft_will_stop_basic_authentication_on/Re: Basic Authentication will end on October so I decided to make a guide on how to handle it
biomediqa Make sure on your Azure AD sign in logs you enable the Columns Operating System and Device Browser used for the sign in, it will help you understand from which software/device the legacy protocal is being used. In the OS what does it say ? Are you using iOS ? if so then try removing your account and re-adding it because it still might be using Exchange Active Sync.
