M365 Join Restriction
Hi All, I need your kind support in advising me on the below questions, I want to create a dynamic query which brings only TPM 1.2 and above machines in to the M365 group I want to block specific device model like Dell Latitude 5420 from enrolling on…
Password in the cloud
i have observed multiple sign ins from dublin location with the IP being microsoft , and the user agent is Rich client , further the auth method is Password in the cloud, also we have observedToken Protection - Sign In Session StatusCode is the same for…
Easy passwords
Is it possible to make a policy which does not allow easy passwords like qwerty1234
what solution has replaced microsoft Network Access Protection (NAP)
NAP is a client health policy creation, enforcement, and remediation technology. With NAP, system administrators can establish and automatically enforce health policies, which can include software requirements, security update requirements, and other…
Microsoft Threat Modeling Tool - Manually added threats Interaction name changed to "Deleted"
When I manually add threats by right-clicking on the interaction name, the threat is added, and I am able to enter information. After saving, the Interaction name changes to "Deleted" so when you filter on the interaction name, manually added…
how to enable remote lock in Microsoft Intune ?
Hi Reader, I would like to know how to enable remote lock in Microsoft Intune ? The device which I need to lock remotely is compliant and that I have checked from the overview and the mentioned device is "Microsoft Entra Joined" also. However,…
How to setup/configure "Disable the local storage of passwords and credentials" using Intune?
How to setup/configure "Disable the local storage of passwords and credentials" using Intune? We have below recommendations in our tenant inside M365 Defender. See below screenshot.
How to Enable Remote Lock in Microsoft Intune?
Hi Reader, I would like to know how to enable remote lock in Microsoft Intune ? My aim is to Remotely lock any Entra id connected device (through work or school account) in my organization through microsoft intune of the Global Admin. The device which I…
How to Enable Remote Lock in Microsoft Intune?
Hi Reader, I would like to know how to enable remote lock in Microsoft Intune ? The device which I need to lock remotely is compliant and that I have checked from the overview and the mentioned device is "Microsoft Entra Joined" also. However,…
About Password Policy
Hi all, Can I allow the user to change their AD password a maximum of 5 times in the same day? I can't do this with AD password policy. Is there another way? If I write 1 in the Minimum password age field, it can only be changed once a day, but I don't…
Intune Application Deployment Delay and Log Location
Hello everyone, We are experiencing delays in the installation of applications deployed via Intune, even though the installation is set to "Required". The process is taking longer than expected. Could anyone please guide us on the following: …
Active Directory Password Policy: Changing the [Mast Change] Attribute
Hello everyone, Is there an article that specifies how to change the [Mast Change] attribute in Active Directory? I need to modify this parameter for some users to enforce a password change (bypassing the Default Policy - GPO). Are there any certified…
Everyone locked out of tenant due to a faulty Conditional Access Policy
We have been locked out of our tenant for almost 2 weeks now due to a faulty Conditional Access policy. During this week, there have been several conversations with a number of Microsoft support technicians, none of which seemed to have an understanding…
Cant remove work or school account from personal PC
recently left an organization and my ID there was disabled. When employed there, I used my personal PC for work as well as my own stuff. Now I get frequent requests to log in to my Work or School Account. How do I remove the Work account from my personal…
Multiple failed access attempts
Recently my email account has about 20 failed login attempts every day. This has been occurring for the past month and I am constantly being logged out of my email because of the multiple log in attempts. I changed my password and downloaded the…
BitLocker Recovery Prompt After Update - Assistance Needed
Hi everyone, I’m experiencing an issue where BitLocker recovery is being required on a device, and I’m trying to understand why. The device recently received update KB5048652, and the recovery prompt started appearing after that. Is there a way to…
Disable Bitlocker on Surface RT8.1 and enter UEFI mode
I have an earlier Surface RT8.1 (2013) with an Nvidia Tegra(R) 3 Quad Core CPU 1.3GHz 2GB RAM 32bit OS Arm based proc. I want to disable Bitlocker and enter to change boot sequence at startup. How to do that? Thanks
Your system administrator has blocked this program. for more info contact your system administrator
I am using a domain account and, as per company policy, I cannot create a local account. Additionally, I am unable to access the User Account Control (UAC) window to add or remove programs on this system. Could you please provide assistance with this…
Conditional Access Policy Frustration
I do what I am asked. I was asked to build a policy that would prevent using Office 365 apps or access to Online apps unless the device was either Entra Registered or Entra Joined. I have this working 99%. The issue is that I cannot enroll new devices…
Conditional Access Policy with Device Filter issue
My Azure Tenant is already licensed with Entra ID Premium P1 and both my AD user account and Computer account is hybrid synched to Entra ID with Azure AD Connect. I am having issue with configuring the Conditional Access Policy with Device Trust…