Security

Holiday season is a good time to train your users about common security risks they may fall into it. Let me describe how to create a security awareness campaign and how to let users know their score. In Microsoft’s latest Digital Defense Report 2022 there are some very good conclusions and suggestions how to improve security in the digital space. In an environment where a lot of false information is publishes, phishing gets better and better. And people still need to be aware about security in their digital environment. The numbers, Microsoft can provide, are impressive: ...

Sometimes organizations want to make certain data available to dynamic groups. The good news is: SharePoint Online supports Dynamic Groups. Here is a step-by-step guide to show you how it works. With Dynamic Groups, members can be grouped based on specific characteristics, for example if a user property exists, they are assigned to a certain department and more. This is very useful if only certain users should be members of such a group, especially in large companies. In this short article, we create a new Dynamic Group in Azure AD, and assign the Group to a SharePoint Online site. ...

Credentials and secrets should be stored in a secure environment and not directly in an Azure Logic App or script. Azure provides the Key Vault service, which allows to store such secrets in a secure and controllable way. See how this works here. What is a secret? The Microsoft documentation of Azure Key Vault describes secrets follows: “A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, or cryptographic keys.” at Azure Key Vault basic concepts and at Azure Key Vault security. So you want to store ALL secrets in a safe location, in a Key Vault, and access them from other services. This can be done within Azure resources with a Managed Identity (see below). In this article we will focus on using an Azure Key Vault and storing such secrets and accessing them later in this step-by-step guide. ...

I recently came across an article that shows how (in)secure passwords are these days. See it here! On Hive Systems, author Corey Neskey has created an article and an illustrative table titled “Time it takes a hacker to brute force your password in 2022”. As computers become more and more powerful, passwords can be hacked faster and faster. It’s amazing how quickly short passwords can be hacked these days. Therefore, using a good and long password and MFA is essential these days. ...

One thing is for sure - every day is a great day to learn something new from Microsoft Teams’ MVPs. Within the latest episode, “Microsoft Teams’ Most Valuable Professionals (MVPs)- Learn from the experts”, you can learn from MVPs in the fields of planning, deploying, adopting, managing, and securing Teams. Stephen Rose (@stephenlrose), Senior Marketing Manager at Microsoft Teams and host of the “Inside Microsoft Teams” series, invited several experts around the world share their favorite tips and tricks on Microsoft Teams. ...

Recently, I stumbled across a strange behavior when running self-developed SPFx webparts in various browsers. When the SPO app was deployed, it worked well with Single-Sign-On, but in some browsers, the webpart was blocked. Instead, a grey box saying “login.microsoftonline.com refused to connect.” was displayed. I experienced that behavior in Chrome, and Edge, while FireFox, Safarai and Opera showed the webpart. Also, there was a different experience when working in the normal mode, or in the In-Private mode. If that happens to you, check out the solution here. ...

To ensure the security of your Microsoft 365 client, we recommend implementing an appropriate governance and security strategy. An effective measure is to determine the current administrators and their permissions. In this article, we want to identify administrators with permanent roles and administrators who can use roles with Privileged Identity Management (PIM). PIM provides just-in-time privileged access to Azure AD and Azure resources. See how to find all Administrators, including PIM, here. ...

Sometimes it´s required to run a script as a service user on a Windows machine, e.g. for reading file shares as a different user with different permissions or similar tasks. You can easily do this using the following two methods. Method 1: Run a task as different user with Scheduled Tasks The first method is to create a new basic task in Computer Management / System Tools / Task Scheduler / Task Schedule Library. ...

Galactic Summit was THE Microsoft 365 online conference that happened on June 2nd and June 9th, 2020 on USS Defiant, USS Voyager, USS Enterprise, USS Discovery and La Sirena with over 8000 attendees. You can now watch the sessions online! Thanks to the organizers Adis, Margit, Spencer, Elena and Fitz, the sponsors and speakers of #GalacticSummit for this great and free online event! See all sessions at www.collabsummit.space. Find our sessions here: Best practices to use Microsoft 365 for crisis communication requirements, Martina Grom ...

Microsoft 356 helps you communicate from anywhere. Today, the Microsoft 365 Virtual Marathon online event starts and I show different services like the quick to use crisis communication SharePoint site the Microsoft Health Care Bot service and more. Check out the Microsoft 365 Virtual Marathon and see how to start with these two services here. Microsoft 365 Virtual Marathon You can still join the free 36-hour Microsoft 365 Virtual Marathon online event and attend hundreds of interesting sessions, see the schedule. We from atwork will present the following sessions: ...