Thibault Chatiron

Microsoft Defender for Office 365: Introducing Advanced Delivery for Phishing Simulations and SecOps Mailboxes

Microsoft is introducing a new capability, Advanced Delivery, for the configuration of third-party phishing simulation campaigns and delivery of messages to security operations (SecOps) mailboxes. Admins will now be able to explicitly configure for the following scenarios and ensure messages configured as part of these scenarios are handled correctly across product experiences: Third-Party Phish simulation …

Microsoft Graph privacy controls to fully replace the classic Office Delve control in May

In August 2020, Microsoft announced that Microsoft Graph privacy controls would be available in the fourth quarter. These Microsoft Graph privacy controls allow administrators to more granularly configure the visibility of Graph-derived insights which includes documents and sites across Microsoft 365 apps and services. Microsoft also announced a six-month transition period before the new controls …

Azure AD Default access token lifetime Variation

Microsoft is making some changes to the default lifetime of Access Tokens. The default lifetime of Access Tokens issued by Azure AD will change from a static value of 60 minutes to a value between 60-90 minutes (75 minutes on average). Microsoft is making this change to provide a smoother experience across the service. When …

Support for viewing MIP protected PDF files protected in other business tenants [Public Preview]

Microsoft has introduced additional support for MIP protected PDF’s in Microsoft Edge. This is currently in preview. What is the feature? If your organization has Microsoft Information Protection enabled, Microsoft Edge could open MIP protected PDF files which were protected in the same tenant seamlessly; across Windows and Mac. The support is now extended to …

Microsoft Cloud App Security – Release 199

Service Health Dashboard availabilityThe enhanced Cloud App Security Service Health Dashboard is now available within the Microsoft 365 Admin portal for users with Monitor service health permissions. Learn more about Microsoft 365 Admin roles. In the dashboard, you can configure notifications, allowing relevant users to stay updated with the current Cloud App Security status. To learn how to configure email …

Microsoft Cloud App Security – Release 198

Exclusion of Azure Active Directory groups entities from discoveryMicrosoft has added the ability to exclude discovered entities based on imported Azure Active Directory groups. Excluding AAD groups will hide all discovery-related data for any users in these groups. For more information, see Exclude entities. API connector support for ServiceNow Orlando and Paris versionsMicrosoft has added support …

New release (2.11.58) of AIP UL [General Availability]

AIP UL client 2.11.58 is now GA and available to download https://aka.ms/AIPClient What’s new ? This version includes the following new features, fixes, and enhancements for the unified labeling scanner and client: Scanner usage logging in the Windows event log Scanner diagnostics tool improvements Improved scanner details output Updates for the scanner’s supported information types …

New release (2.11.57) of AIP UL [General Availability]

Today, Microsoft announced that AIP UL client 2.11.57 is now GA and available to download https://aka.ms/AIPClient What’s new ? This version includes the following new features, fixes, and enhancements for the unified labeling scanner and client: Scanner usage logging in the Windows event log Scanner diagnostics tool improvements Improved scanner details output Updates for the …

License check for Advanced eDiscovery

Starting April 16, 2021, all customers using Advanced eDiscovery must have the appropriate licensing in order to continue creating new cases in the solution. You have to maintain an Advanced Compliance or E5 license. Key points: Timing: We will begin rolling this April 16, 2021 Action: review and ensure you have the appropriate licensing How …

New Endpoint DLP features [Public Preview]

Prerequisites Licensing Microsoft 365 E5 Microsoft 365 A5 (EDU) Microsoft 365 E5 compliance Microsoft 365 A5 compliance Microsoft 365 E5 information protection and governance Microsoft 365 A5 information protection and governance Hardware/software Your devices must be running Windows 10 x64 build 1809 or later. The device must have Antimalware Client Version is 4.18.2101.9 or later …

Microsoft Cloud App Security – Release 197

Status page deprecation noticeOn April 29, Cloud App Security will deprecate the service health status page, replacing it with the Service Health Dashboard within the Microsoft 365 Admin portal. The change aligns Cloud App Security with other Microsoft services and provides an enhanced service overview. Only users with Monitor service health permissions can access the dashboard. For more information, …

Microsoft Cloud App Security – Release 195 and 196

Enhanced Shadow IT discovery with Microsoft Defender for EndpointMicrosoft has further improved the Defender for Endpoint integration by leveraging enhanced signals for the Defender agent, providing more accurate app discovery and organizational user context. To benefit from the latest enhancements, make sure your organizational endpoints are updated with the latest Windows 10 updates: KB4601383: Windows …

Temporary Access Pass [Public Preview]

Temporary Access Pass is a game-changer that completes the end-to-end passwordless onboarding experience for your users. Microsoft created Temporary Access Pass to address many of your passwordless account onboarding and recovery scenarios. For a user to truly be passwordless, they shouldn’t know or use their password, and instead use passwordless authentication methods and recovery if …

Update your Apple Configurator profile if Enrollments are Failing with Setup Assistant

Note : This only impacts the iOS/iPadOS device enrollment using Apple Configurator. Only setup assistant workflow is impacted – all other iOS/iPad enrollment workflows are not affected. There was a certificate mismatch between Apple Configurator profiles and the Intune certificate issuing service for iOS/iPadOS enrollment through this setup experience. Existing devices remain enrolled as they …

Audit log improvements introduced in AIP Unified Labeling client 2.8.85

Clarification about audit log improvements introduced in AIP Unified Labeling client 2.8.85, that allow clearer visibility and alignment with Office native audit logs: Audit logs for access events from the unified labeling client are now sent only when users open labeled or protected files, providing a clearer indication of user access. Information types are no …

Microsoft Cloud App Security – Release 192, 193, and 194

Updates to Policies pageMicrosoft has updated the Policies page, adding a tab for every policy category. Microsoft also added an All policies tab to give you a complete list of all your policies. For more information about the policy categorization, see Policy types. Enhanced Office 365 OAuth apps exportMicrosoft has enhanced the Office 365 OAuth …

New release (2.9.116) of AIP UL [General Availability]

Microsoft released AIP UL version 2.9.116 This is maintenance release that includes bug fixes only. It will correct bug that I talked about on a previous post : https://thibaultchatiron.fr/2021/02/03/problem-on-the-latest-version-2-9-111-of-the-aip-client/ For reminder, the issue was for the scenarios where users were not able to view protected files as expected in the following scenarios: When protected files …

Known Issue: Android 10 Samsung A10 Biometric Authentication

There is a known issue with the Android 10 Samsung A10 biometric authorization in case you run into it. Launching any apps with App Protection Policies (APP, also known as MAM) on an Android 10 Samsung A10 with biometric authorization enabled (face recognition/thumbprint) will cause the device to crash. This issue has already been filed …

iOS 14 fails compliance check when passcode expires

Some customers raised several support cases around compliance check behavior in iOS 14. The customer had a compliance policy set with a value for “Password expiration (days)”. Prior to iOS 14, devices would prompt the end user to change the device passcode, and provided they changed it, then the policy condition was met and there …

New features on ATP Safelinks

Microsoft add two new feature on ATP Safe Links : Display the organization branding on notification and warning pages Use custom notification ATP Safe Links branding is now rolling out for you! Check out your ATP Safe Links policy.

M	T	W	T	F	S	S
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30

Cookie	Duration	Description
__gads	1 year 24 days	The __gads cookie, set by Google, is stored under DoubleClick domain and tracks the number of times users see an advert, measures the success of the campaign and calculates its revenue. This cookie can only be read from the domain they are set on and will not track any data while browsing through other sites.
_ga	2 years	The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
_gid	1 day	Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.
CONSENT	2 years	YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data.

Cookie	Duration	Description
ANONCHK	10 minutes	The ANONCHK cookie, set by Bing, is used to store a user's session ID and also verify the clicks from ads on the Bing search engine. The cookie helps in reporting and personalization as well.
IDE	1 year 24 days	Google DoubleClick IDE cookies are used to store information about how the user uses the website to present them with relevant ads and according to the user profile.
MUID	1 year 24 days	Bing sets this cookie to recognize unique web browsers visiting Microsoft sites. This cookie is used for advertising, site analytics, and other operations.
test_cookie	15 minutes	The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies.

Cookie	Duration	Description
_clck	1 year	No description
_clsk	1 day	No description
ApplicationGatewayAffinityCORS	session	No description available.
CLID	1 year	No description
GoogleAdServingTest	session	No description
LiSESSIONID	session	No description available.
LithiumUserInfo	past	No description
LithiumUserSecure	past	No description
LithiumVisitor	1 year	No description available.
original_req_url	past	No description
SM	session	No description available.
SRM_B	1 year 24 days	No description available.

Thibault CHÂTIRON

Microsoft Defender for Office 365: Introducing Advanced Delivery for Phishing Simulations and SecOps Mailboxes

Microsoft Graph privacy controls to fully replace the classic Office Delve control in May

Azure AD Default access token lifetime Variation

Support for viewing MIP protected PDF files protected in other business tenants [Public Preview]

Microsoft Cloud App Security – Release 199

Microsoft Cloud App Security – Release 198

New release (2.11.58) of AIP UL [General Availability]

New release (2.11.57) of AIP UL [General Availability]

License check for Advanced eDiscovery

New Endpoint DLP features [Public Preview]

Microsoft Cloud App Security – Release 197

Microsoft Cloud App Security – Release 195 and 196

Temporary Access Pass [Public Preview]

Update your Apple Configurator profile if Enrollments are Failing with Setup Assistant

Audit log improvements introduced in AIP Unified Labeling client 2.8.85

Microsoft Cloud App Security – Release 192, 193, and 194

New release (2.9.116) of AIP UL [General Availability]

Known Issue: Android 10 Samsung A10 Biometric Authentication

iOS 14 fails compliance check when passcode expires

New features on ATP Safelinks

Thibault CHÂTIRON

Follow Blog via Email

Recent Posts

Categories

Archives