Microsoft Entra Connect will enforce new security hardening measures starting March 2026 to prevent SyncJacking, a sophisticated attack technique...
Tag Archive for: active directory
4sysops - The online community for sys and AI ops
Microsoft Entra PowerShell v1.2.0 brings Agent Identity Blueprint management and new automation features
Microsoft released version 1.2.0 of the Microsoft Entra PowerShell module, introducing production-ready support for Agent Identity Blueprints, enhanced application...
Disable weak RC4 encryption on Active Directory domain controllers to prevent Kerberoasting attacks exploiting Kerberos vulnerability CVE-2026-20833
Microsoft has initiated a critical security hardening phase for Windows Active Directory domain controllers to address CVE-2026-20833, a Kerberos...
Syncing passkeys with Microsoft Entra ID
Microsoft Entra ID introduces synced passkeys to simplify multi-factor authentication and reduce the security risks associated with traditional methods...
Microsoft to block unauthorized scripts in Entra ID logins with 2026 CSP update
Microsoft is enforcing stricter Content Security Policy (CSP) for Entra ID authentication, blocking unauthorized scripts from executing during sign-in....
UserLock 13.0: IAM for Active Directory with granular MFA, contextual access controls, and real-time session management
IS Decisions’ UserLock is an identity-and-access-management (IAM) tool that adds multi-factor authentication (MFA), contextual access controls, session management, and...
New features in Microsoft Entra: WebView2, AI Agents ID, synced passkeys
Recent Microsoft Entra and Windows updates introduce multiple changes across authentication, identity management, and access control. The updates include...
Self-service password reset with SMS in Microsoft Entra External ID
Microsoft Entra External ID now supports SMS-based verification for self-service password reset (SSPR), providing external users an additional recovery...
Microsoft removes WINS after Windows Server 2025
Microsoft will retire the legacy Windows Internet Name Service after Windows Server 2025, strongly encouraging organizations to transition to...
New Windows 11 25H2 Group Policy settings
Windows 11 version 25H2 introduces 42 new Group Policy settings for administrators to manage system behavior, security features, and...
AD replication error 8418: The replication operation failed because of a schema mismatch between the servers involved
Active Directory domain controllers running Windows Server 2025 with the schema master FSMO role may create duplicate schema attribute...
Understanding the interaction between Microsoft Defender for Identity and Secure Score
Microsoft Defender for Identity and Microsoft Secure Score work together to strengthen identity security across on-premises Active Directory and...
New Administrative Templates (ADMX/ADML) for Windows, Outlook, Word, Excel, and OneNote
Microsoft has released significant updates to Administrative Templates (ADMX/ADML files) throughout 2025, introducing new Group Policy options for Windows...
MPA Tools: Enhancing Microsoft endpoint management for Windows, Active Directory, Configuration Manager, Intune, and Entra ID
MPA Tools, created by Veles Software, is an endpoint management and troubleshooting solution for Windows environments that addresses gaps...
Migrate Certification Authority to Windows Server 2025
In an earlier article, I discussed migrating an Active Directory domain controller to Windows Server 2025. This article explains...
How to activate the built-in Administrator account in Windows 11
Activating the built-in Administrator account in Windows 11 can be essential for IT administrators in specific scenarios. This comprehensive...
Upgrade domain controller and migrate Active Directory to Windows Server 2025
Windows Server 2025 introduces several new features and security improvements for Active Directory, including a new functional level and...
Updated ADMX for Office: 50 new settings, primarily for AI
Microsoft recently updated the administrative templates for the Office suite, introducing a significant number of new settings. Most of...
Restrict and report logon hours for Active Directory accounts
For security purposes, it may be beneficial to restrict Active Directory account logins to regular working hours. These logon...
Group Policy changes: Windows 11 compared to Windows 10
Since Group Policy changes remain a cornerstone of centralized Windows system management, admins should know which settings have been...



-with-Microsoft-Entra-Verified-ID-on-iPhone-(image-Microsoft).png)


.png)




.png)











