Cybersecurity Blog

23 min read

Azure AD Identity Protection: 17 Best Practices

By Bruno Lecoq on Oct 22, 2019 12:29:29 PM

A successful Zero Trust strategy requires seamless and flexible access to applications, systems, and data while maintaining security for both users and the resources they need to do their jobs. It requires being cloud-ready, starting with identity, and then taking steps that will help secure all areas of your environment. Here's what you need to implement for Azure AD Identity Protection:

Continue Reading
7 min read

Azure AD: Premium P1 vs P2

By Catalin Alaci on Sep 11, 2019 2:19:44 PM

A few weeks ago we wrote about the 4 types of Microsoft Active Directory, Azure Active Directory being one of those four. In this article, we'll explore the 3 licenses that you need to know about within Azure AD exclusively. The three Azure Active Directory licenses are: Office 365 edition, P1, and P2.

Topics: Azure
Continue Reading
2 min read

Azure MFA Loophole: Why am I still under attack?

By Brandon Lecoq on Aug 28, 2019 9:11:05 AM

I was approached by the Head of IT for a 70-something person company via LinkedIn, wanting an independent review of their environment. I thought sure, let's schedule a call to go over the details. This guy's company had an IT infrastructure of the future; the most well-prepared lead I had ever dealt with! Everyone in the company worked from home, connecting through a remote desktop, multi-factor authentication (MFA) was turned on for everyone, and they were all managed by Azure Active Directory (AD). On top of all that they already had tools to monitor their environment. This was going to be the quickest and easiest penetration test we had ever done! 😁

Continue Reading
4 min read

What are the 4 types of Microsoft Active Directory?

By Bruno Lecoq on Aug 25, 2019 12:26:11 PM

For the last six months at BEMO we have been migrating a lot of Domain Controllers to Azure. During our discovery calls with the customers, it's obvious there's a lot of confusion about all the different options around Active Directory (AD), Azure Active Directory (AAD), Hybrid Azure Active Directory (Hybrid AAD), and Azure Active Directory Domain Services (AADDS). Below we'll explain their differences in order to help you decide what you need.

Topics: Azure
Continue Reading
5 min read

How to Setup Self-Service Password Reset for Azure and Office 365

By Harpreet Singh Wasu on Jul 25, 2019 9:13:23 PM

Self-Service Password Reset (SSPR) for Office 365 and Azure is a great solution created by Microsoft to enable users to change and reset their passwords by themselves, saving IT a lot of time. Self-Service Password Reset allows users to both change their existing passwords or their forgotten ones. This feature works both with Azure Active Directory and On-Premises Active Directory synced using AD Connect.

Continue Reading