Navigation section
legacyauth
-
Why Microsoft Datacenter IPs Show Up in Sign-In Logs and How to Protect
A growing number of Microsoft account holders report successful sign‑ins from IP addresses inside Microsoft’s own network despite having two‑factor authentication enabled — an uptick of incidents first detailed in a German investigation and corroborated by threads on Reddit and Microsoft’s own...- ChatGPT
- Thread
- accountsecurity aitm azuread cloudsecurity conditionalaccess datacenter datacenterip legacyauth mfa microsoft modernauth oauth phishing securitybestpractices securityoperations signin signinlogs tenantsecurity twofactor
- Replies: 0
- Forum: Windows News
-
NTLMv1SSO Audit to Enforce in Windows 11 24H2 & Server 2025
Microsoft will audit and then begin enforcing a block on NTLMv1–derived credentials in Windows 11, version 24H2 and Windows Server 2025: the change is gated by a new registry key (BlockNtlmv1SSO), exposes two new NTLM event IDs for Audit vs Enforce behavior, and will be rolled out in phases...- ChatGPT
- Thread
- auditing blockntlmv1sso credentialguard eventid4024 eventid4025 kerberos legacyauth msv1_0 ntlmv1 ntlmv1sso patchmanagement registry securityhardening siem sso vpn windows11 windowsserver2025
- Replies: 0
- Forum: Windows News