Restricting OneDrive To Multiple Tenants

You can use GPO or Intune/MDM settings to restrict a number of settings with OneDrive. One of the documented settings is called “Allow syncing OneDrive accounts for only specific organizations”. Notice how it is a title in the plural – more than one organization. But if you look at all the documentation and examples others… Continue reading Restricting OneDrive To Multiple Tenants

Migrating MFA Settings To Authentication Methods

Released to Azure AD in December 2022 there is now a process for migrating from the legacy MFA methods and Self-Service Password Reset (SSPR) authentication methods to the unified Authentication Methods policies in Azure AD. This migration window is open until Jan 2024 when the legacy methods will be disabled. This change will allow you… Continue reading Migrating MFA Settings To Authentication Methods

Managing Hybrid Exchange Online Without Installing an Exchange Server

In April 2022 Microsoft finally released the ability to manage Active Directory synced attributes (Hybrid Identity) to Azure Active Directory for Exchange without a full Exchange Server installation. You have instead an install of the Exchange Management Tools. You need to be Exchange Server 2019 CU12 to do this, and you either uninstall your existing… Continue reading Managing Hybrid Exchange Online Without Installing an Exchange Server

Conditional Access in Defender for Cloud (MCAS)

I was asked this question last week at Microsoft Ignite following a talk that I did, and as it was a question it was clearly not as clear cut as maybe I thought it was. The question was, “why is Conditional Access found in Azure AD and Defender for Cloud?” (Defender for Cloud was previously… Continue reading Conditional Access in Defender for Cloud (MCAS)

Conditional Access Authentication Strengths

Newly released to Conditional Access in Azure AD is the “Authentication Strengths” settings. These allow you to control the strength of the authentication you need to be used for that conditional access rule. Before this feature was available you had the option of allowing access with no second factor, MFA as a second factor (any… Continue reading Conditional Access Authentication Strengths

What Is “Multifactor Authentication Trusted IPs”

In Azure AD for location based conditional access rules you can select “Multifactor Authentication Trusted IPs” as a location. This short blog post outlines what this is. As an example of the use of this location, it could be used as follows in Conditional Access: The location selected in the above is “Multifactor Authentication Trusted… Continue reading What Is “Multifactor Authentication Trusted IPs”

Getting Teams Meetings Added to Your Events When Using Apple iOS Calendar App

A user can enable an “All Meetings Online” option in Outlook (all versions) to add a Teams meeting automatically when the meeting is created and an admin can enable this centrally for all users with the PowerShell Set-OrganizationConfig -OnlineMeetingsByDefaultEnabled $true But this does not add the meeting bridge to events created in Apple Calendar on… Continue reading Getting Teams Meetings Added to Your Events When Using Apple iOS Calendar App

Improving Exchange Online Email Deliverability Through Third Party Filtering Services – Trusted ARC Sealer

When you receive emails into Exchange Online and you filter the external messages before arrival with a third party filter such as Mimecast, Proofpoint or others, then you can have DMARC failures that result in messages being junked or quarantined. This is a new feature to Exchange Online to allow you to trust the DMARC… Continue reading Improving Exchange Online Email Deliverability Through Third Party Filtering Services – Trusted ARC Sealer

Fixing the Display of Voicemail In Outlook

Once upon a time voicemail in Office 365 was done in Exchange Online Unified Messaging, but that was retired early 2020. Voicemail is now provided by a service known as Cloud Voicemail but Outlook did not keep up to date if you have a newly created tenant and now when voicemail arrives in Outlook it… Continue reading Fixing the Display of Voicemail In Outlook

Gmail showing “via” in Microsoft 365 Email Headers

I came across this issue the other day. In the headers of an email received from Microsoft 365 / Exchange Online into Gmail (and not other recipients) the message header reads “name@domain via otherdomain.onmicrosoft.com”, for example: In this case the via header for onmicrosoft.com was an old organization name and as tenant rename does not… Continue reading Gmail showing “via” in Microsoft 365 Email Headers

Safe Links, Microsoft Teams Rooms or Zoom Rooms, and Preset Security Policies

Or “How to customize Microsoft 365 Preset Security Policies“! The Preset Security Policies in Microsoft 365 allow you to assign to users, groups or domains the recommend anti-spam, anti-spoofing and anti-malware settings (amongst others). In the Microsoft 365 Security Portal (https://security.microsoft.com) where you set this there appears to be no way to customize these policies… Continue reading Safe Links, Microsoft Teams Rooms or Zoom Rooms, and Preset Security Policies

Improving Security For MFA Approvals – Number Matching

Rolling out in November 2021 is a new feature – that of requiring the user to enter a number rather than just click approve on the MFA prompt. This update to Azure AD requires the use of Push Notifications and therefore requires the use of the Microsoft Authenticator app. It also requires that MFA is… Continue reading Improving Security For MFA Approvals – Number Matching

Adding Location To Azure AD MFA

This Azure AD feature is something that a number of other Multi-Factor Authentication providers have already implemented – that of showing the location of the user login (and the app in use) on the MFA prompt. This feature rolled out to Azure AD in mid November 2021 in preview – so use in non-production tenants… Continue reading Adding Location To Azure AD MFA

External Teams Chat – Voice and Video Not Available

I wanted to look and see the options for the Voice/Video buttons in a Microsoft Teams chat, and why sometimes I do not have these available based on who I add to the chat I see these combinations: Internal User Internal Users (more than one) External User Multi-Party including External User(s) Guest Users Meet Now… Continue reading External Teams Chat – Voice and Video Not Available