SlideShare a Scribd company logo
Protecting Cloud Identities
- Using Enterprise Mobility + Security (EMS) and Azure MFA
RONNI PEDERSEN
MICROSOFT MVP: ENTERPRISE MOBILITY
1© RONNIPEDERSEN.COM
Ronni Pedersen
Freelance Cloud Architect
Microsoft MVP: Enterprise Mobility (10 years)
Founder: System Center User Group Denmark
Microsoft Certified Trainer
Microsoft TechNet Moderator
Contact Me
Twitter: @ronnipedersen
Blog: https://www.ronnipedersen.com/
Mail: mail@ronnipedersen.com
Phone: +45 2085 9452About me...
Key Takeways
EMS Overview
Office 365 / Risk Score
Privileged Identity Management
Identity Protection
Multi-factor authentication
Conditional Access
3© RONNIPEDERSEN.COM
Enterprise Mobility + Security
Overview
The world has changed…
5© RONNIPEDERSEN.COM
Office 365 Secure Score
State of the Union…
Office 365 Secure Score
Get your Secure Score
Analyzing Your Score
Take Action (Improve Your Score)
7© RONNIPEDERSEN.COM
Office 365 Secure Score:
- Mailbox Auditing in Office 365
Step 1: Connect to Exchange Online
Step 2: Get the current state of audit logging
Step 3: Enable mailbox audit logging
Step 4: Set the age limit for mailbox audit logging
Step 5: Automate the process using Azure Automation
https://www.ronnipedersen.com/2017/07/29/automate-mailbox-auditing-office-365/
8© RONNIPEDERSEN.COM
Azure AD Privileged Identity Management
Manage, control, and monitor access within your organization
Azure AD Privileged Identity
Management
10© RONNIPEDERSEN.COM
Azure AD Privileged Identity
Management
Manage, control, and monitor access within your organization
Includes resources in Azure AD, Office 365 or Microsoft Intune
Goal: minimize the number of people who have access to
secure information or resources
Enable on-demand, "just in time" administrative access to
Microsoft Online Services like Office 365 and Intune
Privileged identity management requires:
Azure AD Premium P2
Enterprise Mobility + Security (EMS) E5
11© RONNIPEDERSEN.COM
Azure AD Identity Protection
Protect and monitor identities…
Proactively prevent compromised identities from being abused!
Low
User sign-in from infected Device
Medium
User sign-in from unfamiliar locations
Impossible travel to atypical location
Sign-in from anonymous IP addresses
High
User with leaked credentials (up for sales)
Risky Sign-in
13© RONNIPEDERSEN.COM
14© RONNIPEDERSEN.COM
Multi-factor authentication
Modern Authentication
Modern Authentication is the key to success when activating MFA !!!
Turned off for Exchange Online by default.
Turned on for SharePoint Online by default.
Turned off for Skype for Business Online by default.
OFF = App Password (Bad End User Experience)
Enable modern authentication for Skype for Business Online
 https://www.ronnipedersen.com/2017/07/11/enable-modern-authentication-for-skype-
for-business-online/
16© RONNIPEDERSEN.COM
Modern Authentication
- Exchange Online
Enables authentication features like
 Multi-factor authentication (MFA) using smart cards
 Certificate-based authentication (CBA)
 Third-party SAML identity providers
Modern authentication is based on the ADAL and OAuth 2.0
Set-OrganizationConfig -OAuth2ClientProfileEnabled $true
17© RONNIPEDERSEN.COM
Basic vs. Modern Authentication
18© RONNIPEDERSEN.COM
Azure Automation (Runbook)
- Enable Azure MFA
Runbook Overview
Connect to the Tenant
Set Custom MFA Settings
Get all users with a license
Enable MFA for the user
Schedule Recommendation:
 Every day
Look out for new blog post!
19© RONNIPEDERSEN.COM
Conditional Access
“Limited Access”
- SharePoint and OneDrive
Enabling productivity while securing data
 Secure, Productive Enterprise
Allow access to SharePoint and OneDrive
 Unmanaged Device
 Browser-Only Access
 Download, Print, and Sync Disabled
Announcement:
 https://blogs.technet.microsoft.com/enterprisemobility/2017/03/0
9/conditional-access-limited-access-policies-for-sharepoint-are-
in-public-preview/
21© RONNIPEDERSEN.COM
Device Registration / Compliant
DJ++
 Hybrid Identity (Domain Joined + Device Registered in Azure AD)
Azure AD Joined
 Cloud Only (Azure AD Joined)
Workplace Joined
 ”Workgroup” (No Domain or Azure AD Joined)
22© RONNIPEDERSEN.COM
Azure AD Joined (Example)
Command: dsregcmd /status
My Work PC: 6cec6a69-ea4d-4618-b903-98acc2e6d446
23© RONNIPEDERSEN.COM
Device Trust Type
24© RONNIPEDERSEN.COM
25© RONNIPEDERSEN.COM
Thank you!
26© RONNIPEDERSEN.COM

More Related Content

What's hot

Fundamentals of Microsoft 365 Security , Identity and Compliance
Fundamentals of Microsoft 365 Security , Identity and ComplianceFundamentals of Microsoft 365 Security , Identity and Compliance
Fundamentals of Microsoft 365 Security , Identity and Compliance
Vignesh Ganesan I Microsoft MVP
 
3 Modern Security - Secure identities to reach zero trust with AAD
3   Modern Security - Secure identities to reach zero trust with AAD3   Modern Security - Secure identities to reach zero trust with AAD
3 Modern Security - Secure identities to reach zero trust with AAD
Andrew Bettany
 
What is Microsoft Enterprise Mobility Suite and how to deploy it
What is Microsoft Enterprise Mobility Suite and how to deploy itWhat is Microsoft Enterprise Mobility Suite and how to deploy it
What is Microsoft Enterprise Mobility Suite and how to deploy it
Peter De Tender
 
ECMDay2015 - Kent Agerlund - Secunia - 10 minutes is all it takes – Managing ...
ECMDay2015 - Kent Agerlund - Secunia - 10 minutes is all it takes – Managing ...ECMDay2015 - Kent Agerlund - Secunia - 10 minutes is all it takes – Managing ...
ECMDay2015 - Kent Agerlund - Secunia - 10 minutes is all it takes – Managing ...
Kenny Buntinx
 
Microsoft 365 Enterprise Security with E5 Overview
Microsoft 365 Enterprise Security with E5 OverviewMicrosoft 365 Enterprise Security with E5 Overview
Microsoft 365 Enterprise Security with E5 Overview
David J Rosenthal
 
Microsoft EMS Enterprise Mobility and Security Architecture Poster
Microsoft EMS Enterprise Mobility and Security Architecture PosterMicrosoft EMS Enterprise Mobility and Security Architecture Poster
Microsoft EMS Enterprise Mobility and Security Architecture Poster
Ammar Hasayen
 
Microsoft Zero Trust
Microsoft Zero TrustMicrosoft Zero Trust
Microsoft Zero Trust
David J Rosenthal
 
Securing Governing and Protecting Your Office 365 Investments
Securing Governing and Protecting Your Office 365 InvestmentsSecuring Governing and Protecting Your Office 365 Investments
Securing Governing and Protecting Your Office 365 Investments
Chris Bortlik
 
Microsoft Enterprise Mobility Suite Poster
Microsoft Enterprise Mobility Suite PosterMicrosoft Enterprise Mobility Suite Poster
Microsoft Enterprise Mobility Suite Poster
David J Rosenthal
 
2020-03-05 Secure IT day 2020 Abalon - comment protéger votre environnement ...
2020-03-05 Secure IT day 2020  Abalon - comment protéger votre environnement ...2020-03-05 Secure IT day 2020  Abalon - comment protéger votre environnement ...
2020-03-05 Secure IT day 2020 Abalon - comment protéger votre environnement ...
Patrick Guimonet
 
ECMDay2015 - Nico Sienaert – Enterprise Mobility Suite – What it’s all about?
ECMDay2015 - Nico Sienaert – Enterprise Mobility Suite – What it’s all about?ECMDay2015 - Nico Sienaert – Enterprise Mobility Suite – What it’s all about?
ECMDay2015 - Nico Sienaert – Enterprise Mobility Suite – What it’s all about?
Kenny Buntinx
 
Productivity and Security with Microsoft 365 and the Modern Desktop
Productivity and Security with Microsoft 365 and the Modern DesktopProductivity and Security with Microsoft 365 and the Modern Desktop
Productivity and Security with Microsoft 365 and the Modern Desktop
David J Rosenthal
 
How to Secure Access Control in Office 365 Environments
How to Secure Access Control in Office 365 EnvironmentsHow to Secure Access Control in Office 365 Environments
How to Secure Access Control in Office 365 Environments
Quest
 
Troubleshooting The Modern Managed Client - Workplace Nijna Summit 2020
Troubleshooting The Modern Managed Client - Workplace Nijna Summit 2020  Troubleshooting The Modern Managed Client - Workplace Nijna Summit 2020
Troubleshooting The Modern Managed Client - Workplace Nijna Summit 2020
Ronni Pedersen
 
Microsoft 365 Security Overview
Microsoft 365 Security OverviewMicrosoft 365 Security Overview
Microsoft 365 Security Overview
Robert Crane
 
Office 365 Saturday - Office 365 Security Best Practices
Office 365 Saturday - Office 365 Security Best PracticesOffice 365 Saturday - Office 365 Security Best Practices
Office 365 Saturday - Office 365 Security Best Practices
Benoit HAMET
 
How to plan your Modern Workplace Project - SPS Denver October 2018
How to plan your Modern Workplace Project - SPS Denver October 2018How to plan your Modern Workplace Project - SPS Denver October 2018
How to plan your Modern Workplace Project - SPS Denver October 2018
Ammar Hasayen
 
September 2021 Microsoft 365 Need to Know Webinar
September 2021 Microsoft 365 Need to Know WebinarSeptember 2021 Microsoft 365 Need to Know Webinar
September 2021 Microsoft 365 Need to Know Webinar
Robert Crane
 
SCUGBE_Lowlands_Unite_2017_Rest azured microsoft cloud demystified
SCUGBE_Lowlands_Unite_2017_Rest azured   microsoft cloud demystifiedSCUGBE_Lowlands_Unite_2017_Rest azured   microsoft cloud demystified
SCUGBE_Lowlands_Unite_2017_Rest azured microsoft cloud demystified
Kenny Buntinx
 
Pitching Microsoft 365
Pitching Microsoft 365Pitching Microsoft 365
Pitching Microsoft 365
Robert Crane
 

What's hot (20)

Fundamentals of Microsoft 365 Security , Identity and Compliance
Fundamentals of Microsoft 365 Security , Identity and ComplianceFundamentals of Microsoft 365 Security , Identity and Compliance
Fundamentals of Microsoft 365 Security , Identity and Compliance
 
3 Modern Security - Secure identities to reach zero trust with AAD
3   Modern Security - Secure identities to reach zero trust with AAD3   Modern Security - Secure identities to reach zero trust with AAD
3 Modern Security - Secure identities to reach zero trust with AAD
 
What is Microsoft Enterprise Mobility Suite and how to deploy it
What is Microsoft Enterprise Mobility Suite and how to deploy itWhat is Microsoft Enterprise Mobility Suite and how to deploy it
What is Microsoft Enterprise Mobility Suite and how to deploy it
 
ECMDay2015 - Kent Agerlund - Secunia - 10 minutes is all it takes – Managing ...
ECMDay2015 - Kent Agerlund - Secunia - 10 minutes is all it takes – Managing ...ECMDay2015 - Kent Agerlund - Secunia - 10 minutes is all it takes – Managing ...
ECMDay2015 - Kent Agerlund - Secunia - 10 minutes is all it takes – Managing ...
 
Microsoft 365 Enterprise Security with E5 Overview
Microsoft 365 Enterprise Security with E5 OverviewMicrosoft 365 Enterprise Security with E5 Overview
Microsoft 365 Enterprise Security with E5 Overview
 
Microsoft EMS Enterprise Mobility and Security Architecture Poster
Microsoft EMS Enterprise Mobility and Security Architecture PosterMicrosoft EMS Enterprise Mobility and Security Architecture Poster
Microsoft EMS Enterprise Mobility and Security Architecture Poster
 
Microsoft Zero Trust
Microsoft Zero TrustMicrosoft Zero Trust
Microsoft Zero Trust
 
Securing Governing and Protecting Your Office 365 Investments
Securing Governing and Protecting Your Office 365 InvestmentsSecuring Governing and Protecting Your Office 365 Investments
Securing Governing and Protecting Your Office 365 Investments
 
Microsoft Enterprise Mobility Suite Poster
Microsoft Enterprise Mobility Suite PosterMicrosoft Enterprise Mobility Suite Poster
Microsoft Enterprise Mobility Suite Poster
 
2020-03-05 Secure IT day 2020 Abalon - comment protéger votre environnement ...
2020-03-05 Secure IT day 2020  Abalon - comment protéger votre environnement ...2020-03-05 Secure IT day 2020  Abalon - comment protéger votre environnement ...
2020-03-05 Secure IT day 2020 Abalon - comment protéger votre environnement ...
 
ECMDay2015 - Nico Sienaert – Enterprise Mobility Suite – What it’s all about?
ECMDay2015 - Nico Sienaert – Enterprise Mobility Suite – What it’s all about?ECMDay2015 - Nico Sienaert – Enterprise Mobility Suite – What it’s all about?
ECMDay2015 - Nico Sienaert – Enterprise Mobility Suite – What it’s all about?
 
Productivity and Security with Microsoft 365 and the Modern Desktop
Productivity and Security with Microsoft 365 and the Modern DesktopProductivity and Security with Microsoft 365 and the Modern Desktop
Productivity and Security with Microsoft 365 and the Modern Desktop
 
How to Secure Access Control in Office 365 Environments
How to Secure Access Control in Office 365 EnvironmentsHow to Secure Access Control in Office 365 Environments
How to Secure Access Control in Office 365 Environments
 
Troubleshooting The Modern Managed Client - Workplace Nijna Summit 2020
Troubleshooting The Modern Managed Client - Workplace Nijna Summit 2020  Troubleshooting The Modern Managed Client - Workplace Nijna Summit 2020
Troubleshooting The Modern Managed Client - Workplace Nijna Summit 2020
 
Microsoft 365 Security Overview
Microsoft 365 Security OverviewMicrosoft 365 Security Overview
Microsoft 365 Security Overview
 
Office 365 Saturday - Office 365 Security Best Practices
Office 365 Saturday - Office 365 Security Best PracticesOffice 365 Saturday - Office 365 Security Best Practices
Office 365 Saturday - Office 365 Security Best Practices
 
How to plan your Modern Workplace Project - SPS Denver October 2018
How to plan your Modern Workplace Project - SPS Denver October 2018How to plan your Modern Workplace Project - SPS Denver October 2018
How to plan your Modern Workplace Project - SPS Denver October 2018
 
September 2021 Microsoft 365 Need to Know Webinar
September 2021 Microsoft 365 Need to Know WebinarSeptember 2021 Microsoft 365 Need to Know Webinar
September 2021 Microsoft 365 Need to Know Webinar
 
SCUGBE_Lowlands_Unite_2017_Rest azured microsoft cloud demystified
SCUGBE_Lowlands_Unite_2017_Rest azured   microsoft cloud demystifiedSCUGBE_Lowlands_Unite_2017_Rest azured   microsoft cloud demystified
SCUGBE_Lowlands_Unite_2017_Rest azured microsoft cloud demystified
 
Pitching Microsoft 365
Pitching Microsoft 365Pitching Microsoft 365
Pitching Microsoft 365
 

Similar to Azure saturday 2017 - Protecting cloud identities using ems

SharePoint Online v Onprem
SharePoint Online v OnpremSharePoint Online v Onprem
SharePoint Online v Onprem
Concurrency, Inc.
 
Office 365 Portugal_20150711_Meet2_INTRO.PPTX
Office 365 Portugal_20150711_Meet2_INTRO.PPTXOffice 365 Portugal_20150711_Meet2_INTRO.PPTX
Office 365 Portugal_20150711_Meet2_INTRO.PPTX
Joao Livio
 
Protecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Protecting Microsoft Teams from Cyber Security Threats - a Practical GuideProtecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Protecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Benedek Menesi
 
Office365 in today's digital threats landscape: attacks & remedies from a hac...
Office365 in today's digital threats landscape: attacks & remedies from a hac...Office365 in today's digital threats landscape: attacks & remedies from a hac...
Office365 in today's digital threats landscape: attacks & remedies from a hac...
Benedek Menesi
 
Office 365 in today's digital threats landscape: attacks & remedies from a ha...
Office 365 in today's digital threats landscape: attacks & remedies from a ha...Office 365 in today's digital threats landscape: attacks & remedies from a ha...
Office 365 in today's digital threats landscape: attacks & remedies from a ha...
panagenda
 
Softwerx Microsoft 365 Security Webinar Presentation
Softwerx Microsoft 365 Security Webinar PresentationSoftwerx Microsoft 365 Security Webinar Presentation
Softwerx Microsoft 365 Security Webinar Presentation
Patrick Leckie
 
Concurrency Modern Workplace 2017
Concurrency Modern Workplace 2017Concurrency Modern Workplace 2017
Concurrency Modern Workplace 2017
Jake Borzym
 
TugaIT 2017 Office 365 Multi-factor authentication with Microsoft Azure Activ...
TugaIT 2017 Office 365 Multi-factor authentication with Microsoft Azure Activ...TugaIT 2017 Office 365 Multi-factor authentication with Microsoft Azure Activ...
TugaIT 2017 Office 365 Multi-factor authentication with Microsoft Azure Activ...
Nuno Árias Silva
 
Getting started with the Enterprise Mobility Suite (EMS)
Getting started with the Enterprise Mobility Suite (EMS)Getting started with the Enterprise Mobility Suite (EMS)
Getting started with the Enterprise Mobility Suite (EMS)
Ronni Pedersen
 
Primend praktiline pilveseminar - Dokumendihalduse ja kommunikatsiooni viimin...
Primend praktiline pilveseminar - Dokumendihalduse ja kommunikatsiooni viimin...Primend praktiline pilveseminar - Dokumendihalduse ja kommunikatsiooni viimin...
Primend praktiline pilveseminar - Dokumendihalduse ja kommunikatsiooni viimin...
Primend
 
Cloud Computing for Small & Medium Businesses
Cloud Computing for Small & Medium BusinessesCloud Computing for Small & Medium Businesses
Cloud Computing for Small & Medium Businesses
Frank Fuerst
 
Introduction to Microsoft 365
Introduction to Microsoft 365Introduction to Microsoft 365
Introduction to Microsoft 365
Robert Crane
 
overview about comodo ev ssl certificate
overview about comodo ev ssl certificateoverview about comodo ev ssl certificate
overview about comodo ev ssl certificate
William hendric
 
Be Aware Webinar – Office 365 Seguro? Sym, Cloud!
Be Aware Webinar – Office 365 Seguro? Sym, Cloud!Be Aware Webinar – Office 365 Seguro? Sym, Cloud!
Be Aware Webinar – Office 365 Seguro? Sym, Cloud!
Symantec Brasil
 
2018-10-17 J1 6D - Draw your imagination with Microsoft Graph API - Dipti Chh...
2018-10-17 J1 6D - Draw your imagination with Microsoft Graph API - Dipti Chh...2018-10-17 J1 6D - Draw your imagination with Microsoft Graph API - Dipti Chh...
2018-10-17 J1 6D - Draw your imagination with Microsoft Graph API - Dipti Chh...
Modern Workplace Conference Paris
 
Microsoft365 from a Hacker's Perspective
Microsoft365 from a Hacker's PerspectiveMicrosoft365 from a Hacker's Perspective
Microsoft365 from a Hacker's Perspective
Benedek Menesi
 
Saa sure
Saa sureSaa sure
Saa sure
Dealmaker Media
 
It Solution Outsourcing,Lamp, Dot Net,Java,Ms Crm,Cms,Software Development
It Solution Outsourcing,Lamp, Dot Net,Java,Ms Crm,Cms,Software DevelopmentIt Solution Outsourcing,Lamp, Dot Net,Java,Ms Crm,Cms,Software Development
It Solution Outsourcing,Lamp, Dot Net,Java,Ms Crm,Cms,Software Development
Imranahmed_19
 
Recharge Portal Development Company
Recharge Portal Development CompanyRecharge Portal Development Company
Recharge Portal Development Company
Cyrus Recharge Solutions
 
Powerpoint Presentation
Powerpoint PresentationPowerpoint Presentation
Powerpoint Presentation
webhostingguy
 

Similar to Azure saturday 2017 - Protecting cloud identities using ems (20)

SharePoint Online v Onprem
SharePoint Online v OnpremSharePoint Online v Onprem
SharePoint Online v Onprem
 
Office 365 Portugal_20150711_Meet2_INTRO.PPTX
Office 365 Portugal_20150711_Meet2_INTRO.PPTXOffice 365 Portugal_20150711_Meet2_INTRO.PPTX
Office 365 Portugal_20150711_Meet2_INTRO.PPTX
 
Protecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Protecting Microsoft Teams from Cyber Security Threats - a Practical GuideProtecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Protecting Microsoft Teams from Cyber Security Threats - a Practical Guide
 
Office365 in today's digital threats landscape: attacks & remedies from a hac...
Office365 in today's digital threats landscape: attacks & remedies from a hac...Office365 in today's digital threats landscape: attacks & remedies from a hac...
Office365 in today's digital threats landscape: attacks & remedies from a hac...
 
Office 365 in today's digital threats landscape: attacks & remedies from a ha...
Office 365 in today's digital threats landscape: attacks & remedies from a ha...Office 365 in today's digital threats landscape: attacks & remedies from a ha...
Office 365 in today's digital threats landscape: attacks & remedies from a ha...
 
Softwerx Microsoft 365 Security Webinar Presentation
Softwerx Microsoft 365 Security Webinar PresentationSoftwerx Microsoft 365 Security Webinar Presentation
Softwerx Microsoft 365 Security Webinar Presentation
 
Concurrency Modern Workplace 2017
Concurrency Modern Workplace 2017Concurrency Modern Workplace 2017
Concurrency Modern Workplace 2017
 
TugaIT 2017 Office 365 Multi-factor authentication with Microsoft Azure Activ...
TugaIT 2017 Office 365 Multi-factor authentication with Microsoft Azure Activ...TugaIT 2017 Office 365 Multi-factor authentication with Microsoft Azure Activ...
TugaIT 2017 Office 365 Multi-factor authentication with Microsoft Azure Activ...
 
Getting started with the Enterprise Mobility Suite (EMS)
Getting started with the Enterprise Mobility Suite (EMS)Getting started with the Enterprise Mobility Suite (EMS)
Getting started with the Enterprise Mobility Suite (EMS)
 
Primend praktiline pilveseminar - Dokumendihalduse ja kommunikatsiooni viimin...
Primend praktiline pilveseminar - Dokumendihalduse ja kommunikatsiooni viimin...Primend praktiline pilveseminar - Dokumendihalduse ja kommunikatsiooni viimin...
Primend praktiline pilveseminar - Dokumendihalduse ja kommunikatsiooni viimin...
 
Cloud Computing for Small & Medium Businesses
Cloud Computing for Small & Medium BusinessesCloud Computing for Small & Medium Businesses
Cloud Computing for Small & Medium Businesses
 
Introduction to Microsoft 365
Introduction to Microsoft 365Introduction to Microsoft 365
Introduction to Microsoft 365
 
overview about comodo ev ssl certificate
overview about comodo ev ssl certificateoverview about comodo ev ssl certificate
overview about comodo ev ssl certificate
 
Be Aware Webinar – Office 365 Seguro? Sym, Cloud!
Be Aware Webinar – Office 365 Seguro? Sym, Cloud!Be Aware Webinar – Office 365 Seguro? Sym, Cloud!
Be Aware Webinar – Office 365 Seguro? Sym, Cloud!
 
2018-10-17 J1 6D - Draw your imagination with Microsoft Graph API - Dipti Chh...
2018-10-17 J1 6D - Draw your imagination with Microsoft Graph API - Dipti Chh...2018-10-17 J1 6D - Draw your imagination with Microsoft Graph API - Dipti Chh...
2018-10-17 J1 6D - Draw your imagination with Microsoft Graph API - Dipti Chh...
 
Microsoft365 from a Hacker's Perspective
Microsoft365 from a Hacker's PerspectiveMicrosoft365 from a Hacker's Perspective
Microsoft365 from a Hacker's Perspective
 
Saa sure
Saa sureSaa sure
Saa sure
 
It Solution Outsourcing,Lamp, Dot Net,Java,Ms Crm,Cms,Software Development
It Solution Outsourcing,Lamp, Dot Net,Java,Ms Crm,Cms,Software DevelopmentIt Solution Outsourcing,Lamp, Dot Net,Java,Ms Crm,Cms,Software Development
It Solution Outsourcing,Lamp, Dot Net,Java,Ms Crm,Cms,Software Development
 
Recharge Portal Development Company
Recharge Portal Development CompanyRecharge Portal Development Company
Recharge Portal Development Company
 
Powerpoint Presentation
Powerpoint PresentationPowerpoint Presentation
Powerpoint Presentation
 

More from Ronni Pedersen

Windows Autopilot - Workplace Nijna Summmit 2020
Windows Autopilot - Workplace Nijna Summmit 2020Windows Autopilot - Workplace Nijna Summmit 2020
Windows Autopilot - Workplace Nijna Summmit 2020
Ronni Pedersen
 
Windows 10 deployment using ConfigMgr and MDT
Windows 10 deployment using ConfigMgr and MDTWindows 10 deployment using ConfigMgr and MDT
Windows 10 deployment using ConfigMgr and MDT
Ronni Pedersen
 
SCUG.DK - Welcome - September 2015
SCUG.DK - Welcome - September 2015SCUG.DK - Welcome - September 2015
SCUG.DK - Welcome - September 2015
Ronni Pedersen
 
SCUG.dk Windows 10 Management - September 2015
SCUG.dk   Windows 10 Management - September 2015SCUG.dk   Windows 10 Management - September 2015
SCUG.dk Windows 10 Management - September 2015
Ronni Pedersen
 
SCUG.DK - Welcome - June 2015
SCUG.DK -  Welcome - June 2015SCUG.DK -  Welcome - June 2015
SCUG.DK - Welcome - June 2015
Ronni Pedersen
 
SCUG.DK - 1E Nomad Overview - April 2015
SCUG.DK - 1E Nomad Overview - April 2015SCUG.DK - 1E Nomad Overview - April 2015
SCUG.DK - 1E Nomad Overview - April 2015
Ronni Pedersen
 
SCUG.DK - Windows 10 Planning - April 2015
SCUG.DK - Windows 10 Planning - April 2015SCUG.DK - Windows 10 Planning - April 2015
SCUG.DK - Windows 10 Planning - April 2015
Ronni Pedersen
 
SCUG.DK - Automation Strategy - April 2015
SCUG.DK - Automation Strategy - April 2015SCUG.DK - Automation Strategy - April 2015
SCUG.DK - Automation Strategy - April 2015
Ronni Pedersen
 
SCUG.DK: Visualizing Your Data, April 2015
SCUG.DK: Visualizing Your Data, April 2015SCUG.DK: Visualizing Your Data, April 2015
SCUG.DK: Visualizing Your Data, April 2015
Ronni Pedersen
 
SCUG.DK: Protecting Company Data using EMS, April 2015
SCUG.DK: Protecting Company Data using EMS, April 2015SCUG.DK: Protecting Company Data using EMS, April 2015
SCUG.DK: Protecting Company Data using EMS, April 2015
Ronni Pedersen
 
SCUG.DK: Welcome, April 2015
SCUG.DK: Welcome, April 2015SCUG.DK: Welcome, April 2015
SCUG.DK: Welcome, April 2015
Ronni Pedersen
 
Deploying windows 10 in the Enterprise
Deploying windows 10 in the EnterpriseDeploying windows 10 in the Enterprise
Deploying windows 10 in the Enterprise
Ronni Pedersen
 

More from Ronni Pedersen (12)

Windows Autopilot - Workplace Nijna Summmit 2020
Windows Autopilot - Workplace Nijna Summmit 2020Windows Autopilot - Workplace Nijna Summmit 2020
Windows Autopilot - Workplace Nijna Summmit 2020
 
Windows 10 deployment using ConfigMgr and MDT
Windows 10 deployment using ConfigMgr and MDTWindows 10 deployment using ConfigMgr and MDT
Windows 10 deployment using ConfigMgr and MDT
 
SCUG.DK - Welcome - September 2015
SCUG.DK - Welcome - September 2015SCUG.DK - Welcome - September 2015
SCUG.DK - Welcome - September 2015
 
SCUG.dk Windows 10 Management - September 2015
SCUG.dk   Windows 10 Management - September 2015SCUG.dk   Windows 10 Management - September 2015
SCUG.dk Windows 10 Management - September 2015
 
SCUG.DK - Welcome - June 2015
SCUG.DK -  Welcome - June 2015SCUG.DK -  Welcome - June 2015
SCUG.DK - Welcome - June 2015
 
SCUG.DK - 1E Nomad Overview - April 2015
SCUG.DK - 1E Nomad Overview - April 2015SCUG.DK - 1E Nomad Overview - April 2015
SCUG.DK - 1E Nomad Overview - April 2015
 
SCUG.DK - Windows 10 Planning - April 2015
SCUG.DK - Windows 10 Planning - April 2015SCUG.DK - Windows 10 Planning - April 2015
SCUG.DK - Windows 10 Planning - April 2015
 
SCUG.DK - Automation Strategy - April 2015
SCUG.DK - Automation Strategy - April 2015SCUG.DK - Automation Strategy - April 2015
SCUG.DK - Automation Strategy - April 2015
 
SCUG.DK: Visualizing Your Data, April 2015
SCUG.DK: Visualizing Your Data, April 2015SCUG.DK: Visualizing Your Data, April 2015
SCUG.DK: Visualizing Your Data, April 2015
 
SCUG.DK: Protecting Company Data using EMS, April 2015
SCUG.DK: Protecting Company Data using EMS, April 2015SCUG.DK: Protecting Company Data using EMS, April 2015
SCUG.DK: Protecting Company Data using EMS, April 2015
 
SCUG.DK: Welcome, April 2015
SCUG.DK: Welcome, April 2015SCUG.DK: Welcome, April 2015
SCUG.DK: Welcome, April 2015
 
Deploying windows 10 in the Enterprise
Deploying windows 10 in the EnterpriseDeploying windows 10 in the Enterprise
Deploying windows 10 in the Enterprise
 

Recently uploaded

Choosing The Best AWS Service For Your Website + API.pptx
Choosing The Best AWS Service For Your Website + API.pptxChoosing The Best AWS Service For Your Website + API.pptx
Choosing The Best AWS Service For Your Website + API.pptx
Brandon Minnick, MBA
 
Programming Foundation Models with DSPy - Meetup Slides
Programming Foundation Models with DSPy - Meetup SlidesProgramming Foundation Models with DSPy - Meetup Slides
Programming Foundation Models with DSPy - Meetup Slides
Zilliz
 
GenAI Pilot Implementation in the organizations
GenAI Pilot Implementation in the organizationsGenAI Pilot Implementation in the organizations
GenAI Pilot Implementation in the organizations
kumardaparthi1024
 
Microsoft - Power Platform_G.Aspiotis.pdf
Microsoft - Power Platform_G.Aspiotis.pdfMicrosoft - Power Platform_G.Aspiotis.pdf
Microsoft - Power Platform_G.Aspiotis.pdf
Uni Systems S.M.S.A.
 
Columbus Data & Analytics Wednesdays - June 2024
Columbus Data & Analytics Wednesdays - June 2024Columbus Data & Analytics Wednesdays - June 2024
Columbus Data & Analytics Wednesdays - June 2024
Jason Packer
 
Fueling AI with Great Data with Airbyte Webinar
Fueling AI with Great Data with Airbyte WebinarFueling AI with Great Data with Airbyte Webinar
Fueling AI with Great Data with Airbyte Webinar
Zilliz
 
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfUnlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Malak Abu Hammad
 
UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6
DianaGray10
 
TrustArc Webinar - 2024 Global Privacy Survey
TrustArc Webinar - 2024 Global Privacy SurveyTrustArc Webinar - 2024 Global Privacy Survey
TrustArc Webinar - 2024 Global Privacy Survey
TrustArc
 
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalizationFull-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
Zilliz
 
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAUHCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
panagenda
 
Uni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems Copilot event_05062024_C.Vlachos.pdfUni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems S.M.S.A.
 
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FMEEssentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
Safe Software
 
June Patch Tuesday
June Patch TuesdayJune Patch Tuesday
June Patch Tuesday
Ivanti
 
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success StoryDriving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Safe Software
 
How to use Firebase Data Connect For Flutter
How to use Firebase Data Connect For FlutterHow to use Firebase Data Connect For Flutter
How to use Firebase Data Connect For Flutter
Daiki Mogmet Ito
 
AI 101: An Introduction to the Basics and Impact of Artificial Intelligence
AI 101: An Introduction to the Basics and Impact of Artificial IntelligenceAI 101: An Introduction to the Basics and Impact of Artificial Intelligence
AI 101: An Introduction to the Basics and Impact of Artificial Intelligence
IndexBug
 
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
Edge AI and Vision Alliance
 
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
名前 です男
 
Building Production Ready Search Pipelines with Spark and Milvus
Building Production Ready Search Pipelines with Spark and MilvusBuilding Production Ready Search Pipelines with Spark and Milvus
Building Production Ready Search Pipelines with Spark and Milvus
Zilliz
 

Recently uploaded (20)

Choosing The Best AWS Service For Your Website + API.pptx
Choosing The Best AWS Service For Your Website + API.pptxChoosing The Best AWS Service For Your Website + API.pptx
Choosing The Best AWS Service For Your Website + API.pptx
 
Programming Foundation Models with DSPy - Meetup Slides
Programming Foundation Models with DSPy - Meetup SlidesProgramming Foundation Models with DSPy - Meetup Slides
Programming Foundation Models with DSPy - Meetup Slides
 
GenAI Pilot Implementation in the organizations
GenAI Pilot Implementation in the organizationsGenAI Pilot Implementation in the organizations
GenAI Pilot Implementation in the organizations
 
Microsoft - Power Platform_G.Aspiotis.pdf
Microsoft - Power Platform_G.Aspiotis.pdfMicrosoft - Power Platform_G.Aspiotis.pdf
Microsoft - Power Platform_G.Aspiotis.pdf
 
Columbus Data & Analytics Wednesdays - June 2024
Columbus Data & Analytics Wednesdays - June 2024Columbus Data & Analytics Wednesdays - June 2024
Columbus Data & Analytics Wednesdays - June 2024
 
Fueling AI with Great Data with Airbyte Webinar
Fueling AI with Great Data with Airbyte WebinarFueling AI with Great Data with Airbyte Webinar
Fueling AI with Great Data with Airbyte Webinar
 
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfUnlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
 
UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6
 
TrustArc Webinar - 2024 Global Privacy Survey
TrustArc Webinar - 2024 Global Privacy SurveyTrustArc Webinar - 2024 Global Privacy Survey
TrustArc Webinar - 2024 Global Privacy Survey
 
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalizationFull-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
 
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAUHCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
 
Uni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems Copilot event_05062024_C.Vlachos.pdfUni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems Copilot event_05062024_C.Vlachos.pdf
 
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FMEEssentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
 
June Patch Tuesday
June Patch TuesdayJune Patch Tuesday
June Patch Tuesday
 
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success StoryDriving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success Story
 
How to use Firebase Data Connect For Flutter
How to use Firebase Data Connect For FlutterHow to use Firebase Data Connect For Flutter
How to use Firebase Data Connect For Flutter
 
AI 101: An Introduction to the Basics and Impact of Artificial Intelligence
AI 101: An Introduction to the Basics and Impact of Artificial IntelligenceAI 101: An Introduction to the Basics and Impact of Artificial Intelligence
AI 101: An Introduction to the Basics and Impact of Artificial Intelligence
 
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
 
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
 
Building Production Ready Search Pipelines with Spark and Milvus
Building Production Ready Search Pipelines with Spark and MilvusBuilding Production Ready Search Pipelines with Spark and Milvus
Building Production Ready Search Pipelines with Spark and Milvus
 

Azure saturday 2017 - Protecting cloud identities using ems

  • 1. Protecting Cloud Identities - Using Enterprise Mobility + Security (EMS) and Azure MFA RONNI PEDERSEN MICROSOFT MVP: ENTERPRISE MOBILITY 1© RONNIPEDERSEN.COM
  • 2. Ronni Pedersen Freelance Cloud Architect Microsoft MVP: Enterprise Mobility (10 years) Founder: System Center User Group Denmark Microsoft Certified Trainer Microsoft TechNet Moderator Contact Me Twitter: @ronnipedersen Blog: https://www.ronnipedersen.com/ Mail: mail@ronnipedersen.com Phone: +45 2085 9452About me...
  • 3. Key Takeways EMS Overview Office 365 / Risk Score Privileged Identity Management Identity Protection Multi-factor authentication Conditional Access 3© RONNIPEDERSEN.COM
  • 4. Enterprise Mobility + Security Overview
  • 5. The world has changed… 5© RONNIPEDERSEN.COM
  • 6. Office 365 Secure Score State of the Union…
  • 7. Office 365 Secure Score Get your Secure Score Analyzing Your Score Take Action (Improve Your Score) 7© RONNIPEDERSEN.COM
  • 8. Office 365 Secure Score: - Mailbox Auditing in Office 365 Step 1: Connect to Exchange Online Step 2: Get the current state of audit logging Step 3: Enable mailbox audit logging Step 4: Set the age limit for mailbox audit logging Step 5: Automate the process using Azure Automation https://www.ronnipedersen.com/2017/07/29/automate-mailbox-auditing-office-365/ 8© RONNIPEDERSEN.COM
  • 9. Azure AD Privileged Identity Management Manage, control, and monitor access within your organization
  • 10. Azure AD Privileged Identity Management 10© RONNIPEDERSEN.COM
  • 11. Azure AD Privileged Identity Management Manage, control, and monitor access within your organization Includes resources in Azure AD, Office 365 or Microsoft Intune Goal: minimize the number of people who have access to secure information or resources Enable on-demand, "just in time" administrative access to Microsoft Online Services like Office 365 and Intune Privileged identity management requires: Azure AD Premium P2 Enterprise Mobility + Security (EMS) E5 11© RONNIPEDERSEN.COM
  • 12. Azure AD Identity Protection Protect and monitor identities… Proactively prevent compromised identities from being abused!
  • 13. Low User sign-in from infected Device Medium User sign-in from unfamiliar locations Impossible travel to atypical location Sign-in from anonymous IP addresses High User with leaked credentials (up for sales) Risky Sign-in 13© RONNIPEDERSEN.COM
  • 16. Modern Authentication Modern Authentication is the key to success when activating MFA !!! Turned off for Exchange Online by default. Turned on for SharePoint Online by default. Turned off for Skype for Business Online by default. OFF = App Password (Bad End User Experience) Enable modern authentication for Skype for Business Online  https://www.ronnipedersen.com/2017/07/11/enable-modern-authentication-for-skype- for-business-online/ 16© RONNIPEDERSEN.COM
  • 17. Modern Authentication - Exchange Online Enables authentication features like  Multi-factor authentication (MFA) using smart cards  Certificate-based authentication (CBA)  Third-party SAML identity providers Modern authentication is based on the ADAL and OAuth 2.0 Set-OrganizationConfig -OAuth2ClientProfileEnabled $true 17© RONNIPEDERSEN.COM
  • 18. Basic vs. Modern Authentication 18© RONNIPEDERSEN.COM
  • 19. Azure Automation (Runbook) - Enable Azure MFA Runbook Overview Connect to the Tenant Set Custom MFA Settings Get all users with a license Enable MFA for the user Schedule Recommendation:  Every day Look out for new blog post! 19© RONNIPEDERSEN.COM
  • 21. “Limited Access” - SharePoint and OneDrive Enabling productivity while securing data  Secure, Productive Enterprise Allow access to SharePoint and OneDrive  Unmanaged Device  Browser-Only Access  Download, Print, and Sync Disabled Announcement:  https://blogs.technet.microsoft.com/enterprisemobility/2017/03/0 9/conditional-access-limited-access-policies-for-sharepoint-are- in-public-preview/ 21© RONNIPEDERSEN.COM
  • 22. Device Registration / Compliant DJ++  Hybrid Identity (Domain Joined + Device Registered in Azure AD) Azure AD Joined  Cloud Only (Azure AD Joined) Workplace Joined  ”Workgroup” (No Domain or Azure AD Joined) 22© RONNIPEDERSEN.COM
  • 23. Azure AD Joined (Example) Command: dsregcmd /status My Work PC: 6cec6a69-ea4d-4618-b903-98acc2e6d446 23© RONNIPEDERSEN.COM
  • 24. Device Trust Type 24© RONNIPEDERSEN.COM