How to prevent users from joining their devices to Microsoft Entra ID | Cybersecurity World

Описание: By default, all users can join devices to Microsoft Entra ID. This can be risky because users can add their personal computers to Microsoft Entra ID, which is usually undesirable.

However, this is even more of a problem when a user account is compromised, and an attacker would join their own computer to Microsoft Entra ID. Such a computer could then potentially become compliant and gain access to internal applications and services, or bypass some of the restrictions from which compliant devices are excluded. In fact, very often MFA is not required from compliant devices.

Full blog article: https://www.cswrld.com/2024/04/how-to...

Follow me for more!
Blog: https://www.cswrld.com/
LinkedIn:   / lukasberan  
Bluesky: https://bsky.app/profile/lukasberan.com
Twitter / X: https://x.com/lukasberancz