They haunt us for decades now, and it’s hard to get rid om them. It is Microsoft's official security position to not expire passwords periodically without a specific reason, and recommends that cloud-only tenants set the password policy to never expire. If a user creates a strong password (long, complex and without any pragmatic words present) it should remain just as strong in 60 days as it is today. Users tend to pick a weaker password and vary it slightly for each reset. Here is a list of all the articles in this series:Ġ2 – Require MFA for administrative rolesĠ4 – Ensure all users can complete multi-factor authentication for secure accessĠ6 – Enable policy to block legacy authenticationĠ8 – Use Cloud App Security to detect anomalous behaviorĠ9 – Do not allow users to grant consent to unmanaged applicationsġ0 – Discover trends in shadow IT application usageġ3 – Set automated notifications for new and trending cloud applications in your organizationġ4 – Designate more than one global adminĭo not expire passwords Research has found that when periodic password resets are enforced, passwords become less secure.
The articles vary in case of impact and complexity and cover multiple categories.
OFFICE 365 PASSWORD RESET PLEASE PROVIDE ALL REQUIRED FEILD SERIES
In this series, I’ll pick out random actions and try to make it as simple as possible, backed with notes from the field.Īrticles in this series can be read separately since they are written at random order. In the end, Microsoft Secure Score is meant to strengthen your security, not a contest to reach the highest score possible.
Some actions might not even have value for your organization. Although Microsoft does a great job on telling you what to do, some actions have a much bigger impact and need to be balanced against business needs. In this series, I’ll be covering the Microsoft Secure Score improvement actions.
0 kommentar(er)
