I'm shaving my head again this year. Please consider donating to this great cause. Help me raise money for #childhoodcancer research with @StBaldricks.
Agents in AD are going to be indistinguishable from user based service accounts, or even user accounts themselves. But TBH, Entra is also already behind a similar curve. Governance is only covering who colors inside the lines. And if anyone likes coloring outside the lines its AI
Do you know the BIGGEST fear for a Microsoft VP?
Its not whether they will make more money.
It's whether the org they are leading is working on a Zune while the rest of the world is building the iPhone.
Every feature PM is asked 'are you building where the puck is going to
And finally, the biggest issue of all - you must use Sign-in Frequency of Every time
If you only select Require MFA and the attacker has MFA on their token, it passes the check...
Forcing every time ensures the attacker must reauthenticate to get new tokens, locking them out ;)