u/TomGRi2

Upgrading Domain and forest functional levels

We have two 2019 dc's but the Domain functional level is still 2012 R2 and I'd like to bring it up a level. Is there anything that can break after raising the DFL? Similarly if I increase the forest FL?

reddit.com

u/TomGRi2 — 11 hours ago

▲ 1 r/AZURE

Disabling ROPC to prevent spray attacks

I was reading this article about recent ROPC password spray attacks (https://www.govinfosecurity.com/azure-password-spraying-attack-bypasses-mfa-defenses-a-32128). Among my CA policies I have a CA policy blocking Basic Auth and a Policy requiring MFA for all apps/Users.

Will those two policies block ROPC or is there something specific needed?

u/TomGRi2 — 4 days ago