To make the policy apply immediately, run the following command: Set-User -Identity -STSRefreshTokensValidFrom $(::UtcNow) This is a default setting in Exchange Online. There is a delay of 24 hours when the administrator applies a new or updated policy on users. If tenant administrators decide to make a specific policy the default for the entire organization, then they can execute the following command: Set-OrganizationConfig -DefaultAuthenticationPolicy "Test Group" To assign the authentication policy to a specific user, run the following command: Set-User -Identity -AuthenicationPolicy "Test Group" The following example creates an authentication policy named "Test Group" that blocks legacy authentication methods for multiple protocols - this forces any users with this policy to sign in with modern authentication across the numerous Microsoft 365 services: New-AuthenticationPolicy -Name "Test Group" -BlockLegacyAuthActiveSync -BlockLegacyAuthAutodiscover -BlockLegacyAuthImap -BlockLegacyAuthMapi -BlockLegacyAuthOfflineAddressBook -BlockLegacyAuthPop -BlockLegacyAuthRpc -BlockLegacyAuthWebServices It is highly recommended to use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell to perform these types of modifications.
#Outlook modern authentication registry how to#
How to set up a new authentication policy with PowerShell PowerShell is one tool that can define these specific policies to match the business requirements. For example, the business might use an application that relies on Exchange Web Services (EWS) to access mailboxes but only uses basic authentication. Some organizations may have to set up specific user authentication policies to support specific business needs. The following PowerShell command turns on modern authentication for the Office 365 tenant: Set-OrganizationConfig -OAuth2ClientProfileEnabled $trueĪdministrators make and assign authentication policies to users to block basic authentication to Exchange Online, which prevents the request from going to Azure Active Directory or Active Directory Federation Services, depending on how the organization handles authentication. If the output is True, then modern authentication is on. To check if the Microsoft 365 tenant is configured for modern authentication, run the following PowerShell command: Get-OrganizationConfig | Format-Table Name,OAuth* -Auto How to change the modern authentication settings
#Outlook modern authentication registry for mac#
Microsoft said it will permanently disable basic authentication for these protocols in the first week of January 2023.Ĭlients outside of Windows systems that support Exchange Online modern authentication include the following: Outlook 2016 for Mac or later, Outlook for iOS and Android, and Mail for iOS 11.3.1 or later. 1, Microsoft announced it will let customers re-enable basic authentication for selected protocols one time after the Oct. While Outlook 2016 uses modern authentication by default, Outlook 2013 does not and requires several registry key changes to switch to modern authentication. On the Windows client side, Exchange Online modern authentication only works with Outlook 2013 and later. When using modern authentication with a newer version of Outlook, users will get a new authentication pop-up that offers the support for MFA. The change with authentication in the Office 365 services will affect Exchange Online more than any other service as it requires some email client upgrades for many organizations that still run older versions of Outlook. These updates offer a layer of protection against attacks for credentials that have generally posed a significant risk with traditional authentication methods. One of the key enhancements and motivations to go with modern authentication is customers can use Microsoft's multifactor authentication (MFA) and enhanced security that comes with OAuth 2.0.
Modern authentication delivers a new set of security capabilities and protocols used to authenticate to Microsoft Azure and Microsoft 365 services.
With Microsoft's push to get its Microsoft 365 customers to switch and implement modern authentication for its online services by October, cloud administrators should plan for the changes that will affect their users and environment to avoid any potential disruptions to email and other key services.
0 kommentar(er)
