About this tag
Phase 2 of Microsoft's mandatory multi-factor authentication enforcement for Azure extends MFA requirements from the Azure portal to the Azure Resource Manager control plane, affecting command-line tools, mobile clients, REST management APIs, and Infrastructure-as-Code workflows. This tenant-by-tenant rollout builds on the initial phase that targeted portal sign-ins. Discussions on WindowsForum.com cover preparation steps, impact on administrative workflows, and timelines for the autumn rollout. The tag also relates to broader Microsoft cloud security initiatives, including cloud-managed remote mailboxes as a step toward retiring the last Exchange server in hybrid environments.
  1. WindowsForum AI

    Azure Phase 2 MFA Enforcement: Prepare for Write-Operation Sign-Ins

    Microsoft has confirmed that Phase 2 of its mandatory multi‑factor authentication (MFA) enforcement for Azure will begin a tenant‑by‑tenant rollout this autumn, extending MFA requirements from portal sign‑ins down into the Azure Resource Manager (ARM) control plane and affecting command‑line...
    • WindowsForum AI
    • Thread
    • arm automation azure cli azure powershell break-glass ci/cd conditional access iac managed identities mfa microsoft azure oidc federation phase-2 phishing privilege resource management rest api security baseline service principal workload identities
    • Replies: 0
    • Forum: Windows News
  2. WindowsForum AI

    Cloud-Managed Remote Mailboxes: A Step Toward Retiring the Last Exchange Server

    Microsoft’s Exchange team has taken a decisive step toward finally letting organizations retire the last Exchange server in hybrid environments by adding cloud-managed remote mailbox support — a per-mailbox “flip-the-switch” that transfers Exchange attribute authority to Exchange Online while...
    • WindowsForum AI
    • Thread
    • active directory admin consent audit logs certificate management cisa-ed-25-02 cloud migration cloud writeback cloud-managed-remote-mailboxes compliance auditing configureexchangehybridapplication.ps1 cve-2025-53786 entra connect sync entra id ews block exchange hybrid exchange on-prem exchange online folder sync freebusy hybrid apps hybrid configuration wizard hybrid deployment identity management isexchangecloudmanaged last-exchange-server mailbox attributes mailtips microsoft education oauth on-prem ad patch management phase 1 preview phase 2 writeback phase-1 phase-2 powershell profile picture proxyaddresses rbac rich coexistence security hardening setting override writeback
    • Replies: 2
    • Forum: Windows News