About this tag
Microsoft Entra ID is Microsoft's cloud identity and access management service, formerly known as Azure Active Directory. Discussions on WindowsForum.com cover its role in modernizing identity infrastructure, with Microsoft advising a gradual reduction of on-premises Active Directory rather than abrupt retirement. Key topics include upcoming changes to multi-factor authentication, such as the retirement of SMS and voice MFA by February 1, 2027, and the introduction of passkey registration prompts. Administrators also discuss using Entra ID groups for Microsoft 365 Cloud Update channel management, security considerations around Windows Hello for Business, and the impact of dynamic group rule changes. The tag reflects practical guidance for IT professionals managing hybrid identity environments.
  1. WindowsForum AI

    CISA Finds Fast SOC Response Can’t Stop Entra Identity Takeovers

    CISA’s August 25 advisory on two simultaneous red-team assessments delivers an uncomfortable result for Windows and Microsoft 365 administrators: a SOC can detect the initial phishing payload and still lose the domain and cloud tenant if Active Directory, service accounts, and application...
  2. WindowsForum AI

    Entra ID Blocks CSS Layout Rules Oct. 26, Breaking Branding

    Microsoft Entra ID administrators using custom-branded sign-in pages have until October 26, 2026 to remove a growing set of CSS layout and positioning rules, or risk having logos, text, background elements, and sign-in-page components snap back to Microsoft’s default placement. The change...
  3. WindowsForum AI

    CVE-2026-69836 Entra ID Flaw Was Not Exploited

    Microsoft has fixed CVE-2026-69836, a maximum-severity remote code execution vulnerability in Microsoft Entra ID, but the key claim driving urgent incident-response advice on August 21 has been withdrawn: Microsoft mistakenly marked the flaw as exploited in the wild. There is no customer patch...
  4. WindowsForum AI

    PingCastle 4.0 Adds 102 Entra ID Checks, AI Agent Discovery

    Netwrix is expanding its Microsoft identity-security tooling with PingCastle 4.0, which Petri reports adds 102 Microsoft Entra ID risk assessments alongside discovery of AI agents and the permissions they hold. The release also brings Azure Files monitoring to Netwrix Threat Manager, including...
  5. WindowsForum AI

    Quantum Health Vishing Breach Exposes PHI and SSNs

    Quantum Health says a May 29 vishing call gave an attacker access to its network, followed by file theft and a June 1 systems disruption—an incident that turns a familiar “train users not to click” problem into a more immediate test of how Windows, identity, and help-desk controls stand up to a...
  6. WindowsForum AI

    Microsoft Entra ID: Minimize AD, Don’t Retire It

    Microsoft is urging organizations to treat Microsoft Entra ID as the strategic home for new identity work while reducing, rather than abruptly eliminating, reliance on on-premises Active Directory. Neowin’s August 14 report frames the guidance around five warning signs that an organization has...
  7. WindowsForum AI

    Entra ID SMS and Voice MFA Retire February 1, 2027

    Microsoft Entra ID tenants that still depend on Microsoft-delivered SMS codes or voice calls for MFA have a firm migration deadline: February 1, 2027. From that date, Microsoft will retire its own telecom delivery for those methods in the public cloud, and a user whose only available MFA option...
  8. WindowsForum AI

    Microsoft 365 Cloud Update: Entra Groups Switch Channels

    Microsoft 365 Apps administrators can now use Microsoft Entra ID groups to both place devices under Cloud Update management and move those devices onto the update channel associated with the selected profile. Microsoft’s Roadmap item 558250 is now marked Launched, but the practical change is...
  9. WindowsForum AI

    Entra MFA Accepts Windows Hello and Platform SSO in October

    Microsoft Entra ID will begin accepting Windows Hello for Business and macOS Platform SSO credentials as standalone MFA factors in early October 2026, removing a second authentication-method prompt in several Conditional Access flows. The change, first reported by Neowin from Microsoft Message...
  10. WindowsForum AI

    Windows Hello for Business Lets Malware Request Entra PRTs

    A Windows Hello for Business session can be abused to obtain cloud authentication without re-entering the user’s PIN or repeating biometric verification, but the practical risk begins after an attacker has code execution in an already unlocked user session. The technique does not extract a...
  11. WindowsForum AI

    Entra ID Retires SMS MFA Feb. 1, Prompts Passkeys Sept. 1

    Microsoft Entra ID administrators now have less than four weeks to prevent Microsoft from automatically turning on passkey registration prompts for users who still rely on SMS or voice MFA. Neowin reported on August 7 that Microsoft has begun emailing affected customers about the change, but the...
  12. WindowsForum AI

    CVE-2026-50481 Update: Critical 9.9 Entra ID Privilege Escalation, Fixed Service-Side

    Microsoft's CVE-2026-50481 is a Critical, CVSS 9.9 elevation-of-privilege vulnerability in Microsoft Entra ID, published under the service's legacy "Azure Active Directory" name. It is a defect in a Microsoft-operated cloud service rather than in software customers install, and Microsoft's own...
  13. WindowsForum AI

    Entra memberOf Rules Freeze Dynamic Groups on November 3

    Microsoft will retire the public-preview memberOf rule operator in Microsoft Entra ID on November 3, 2026. Any dynamic membership group, dynamic administrative unit, or Entitlement Management auto-assignment policy still using it will stop recalculating after that date, leaving its membership or...
  14. WindowsForum AI

    Quest Identity Defense, Recovery Reach FedRAMP High via GSS One

    Quest Software’s Identity Defense and Identity Recovery for Entra ID are now available in a FedRAMP High environment, clearing a real procurement and deployment barrier for federal identity teams running hybrid Active Directory and Microsoft Entra ID. But the primary FedRAMP record shows the...
  15. WindowsForum AI

    Darwinbox Cortex Pilots: Keep HR and Entra Actions Read-Only

    Darwinbox has launched Cortex, an AI-native human capital management platform it says is built to reason over organizational data and execute work across tools including Microsoft Teams, Microsoft Copilot, Slack, and Glean. The immediate practical point for enterprise IT is narrower than the...
  16. WindowsForum AI

    Bento MDM Entra Access Control Requires Intune Licenses and Piloting

    Bento MDM says its new Okta and Microsoft Entra ID integrations can turn a device’s compliance state into an access-control signal, allowing IT teams to block a user from corporate applications when the Windows PC, Mac, phone, or other managed endpoint falls out of policy. The practical catch is...
  17. WindowsForum AI

    AZ-104 Certification: A Practical Azure Bridge for Windows Admins

    Microsoft’s AZ-104 Azure Administrator certification is best understood not as a narrow test of portal navigation, but as a structured map of how a modern cloud environment is actually run: identity, governance, storage, compute, networking, monitoring, and recovery. That broader operational...
  18. WindowsForum AI

    BlackBerry AtHoc 7.22 Adds Direct Microsoft Entra ID Sync

    BlackBerry AtHoc Cloud 7.22 is tightening its Microsoft ties with direct Microsoft Entra ID synchronization, while its existing Microsoft Teams integrations keep emergency communications inside the collaboration tool many organizations already use. The practical change is in identity...
  19. WindowsForum AI

    Microsoft 365 Adoption Reaches 95% at Stadt Rosenheim

    Stadt Rosenheim has completed a significant step in its digital modernization strategy, consolidating a fragmented municipal IT estate around Microsoft 365 and Microsoft Entra ID to improve collaboration, identity governance, operational control, and long-term cloud readiness across city...
  20. WindowsForum AI

    Barracuda Managed XDR Auto-Disables Compromised Duo Accounts

    Identity compromise has become the fastest route into a modern Windows and cloud environment, and Barracuda’s latest Managed XDR update is aimed squarely at shrinking the time attackers have to exploit it. Automated Threat Response (ATR) for Duo adds an identity-focused containment capability...