Azure MFA (Multi-Factor Authentication) is a well-known and commonly used 2nd factor authentication service delivered as part of the Azure AD platform. The configuration of the service is straightforward and shouldn’t cause a lot of problems for IT specialists. But the Azure MFA licensing is a completely different case, especially if you also have external […]
Azure MFA licensing explained Read More »
This month, Microsoft has fixed 75 vulnerabilities, including 7 criticals and also 3 zero-days. CVE-2022-26925 – Windows LSA Spoofing Vulnerability This vulnerability allows an unauthenticated attacker to force a domain controller to authenticate against another server using NTLM. The threat actor would need to be in the logical network path between the target and the
Microsoft Patch Tuesday – May 2022 Read More »
In my last post, I described Custom Protocol Handler and PowerShell in general. This time I will focus on using PowerShell with it. It really has a big potential, which I’ll try to show in few examples. Just to remind, last time we created a simple protocol showing console message with passed URL and working
Custom Protocol Handler and PowerShell (Part 2) Read More »
When trying to search for the “Custom Protocol Handler” phrase in Google, we will most probably find some articles on how to allow running a local application from a website. It’s quite interesting. Normally a website doesn’t have access to execute commands or applications on a local (client) computer. But there is an ability to
Custom Protocol Handler and PowerShell (Part 1) Read More »
This month, Microsoft has fixed 119 vulnerabilities, including 10 criticals and also 2 zero-days. CVE-2022-24521 and CVE-2022-26904 are “only” privilege escalation vulnerabilities but combined with other bugs they might allow an attacker to code execution at the SYSTEM level. Due to exploitation of the first one is already detected and the second one is rated
Microsoft Patch Tuesday – April 2022 Read More »
Hybrid Azure AD join as the name indicates is a feature that allows you to use your on-premises AD and Azure AD at the same time. Basically, the devices are joined to on-prem AD and registered in Azure AD. Enabling that option might be needed e.g. for using co-management, Autopilot, etc. By default, the Hybrid
Hybrid Azure AD join – controlled roll-out Read More »
Our IT world is moving more and more to the cloud. Thanks to that we can almost forget how useful it could be to have a local backup. In all standard scenarios the cloud provider takes care of backup, provides high availability etc. However, there are situations when a local copy has a price of
Download files from Azure DevOps Repository with PowerShell Read More »
Welcome to IT Constructors blog. And yes…. this is another IT blog but hope you will still find something interesting here. Who we are? Few IT guys who really like what they do. We work with multiple technologies: Identity and Access Management, Microsoft 365 and Azure clouds, Intune, MECM, on-prem solutions and virtualization. And last