Important Microsoft Updates to Stop Bad Actors
By: Dave Kinsey | January 24, 2024
Why Microsoft Rebranded Azure AD to Entra ID
In August 2023, Microsoft rebranded its identity and access services, formerly known as Azure Active Directory, to Entra ID . This shift reflects how far Microsoft has come in developing its security features and how important it is that to adopt them now.
As threats continue to evolve, so must our defenses. Entra ID strengthens protection against the risk of compromised Microsoft 365 accounts, which remain one of the most common and disruptive forms of attack.
Bad actors attempt to gain access to email accounts to access confidential information or impersonate employees in order to send malicious messages to their contacts. While the threat landscape continually changes, email compromise has remained the number one attack vector for decades.
Understanding Entra ID P1 and P2
Entra ID P1 is included in certain Microsoft license bundles, such as Microsoft 365 Business Premium, and can also be added as a standalone subscription. Among other features, P1 enables Conditional Access, which allows organizations to restrict Microsoft 365 access to approved countries only—an effective defense given that many account compromise attacks originate overseas.
Entra ID P2 extends these capabilities with more advanced protections and requires an additional subscription. At Total Networks, we use P2 internally to improve our defenses, and we strongly recommend it for our clients.
P2 introduces Risk Based Protection, which uses various strategies including artificial intelligence to block logins suspicious login attempts, such as “impossible travel” situations, where a user logs in to Office 365 from Arizona and then a few minutes later from the other side of the country. We use these enhanced security features to block certain types of access and flag others for manual review by team members before granting access.
Why We Recommend Microsoft Defender for Office 365
Microsoft's built-in anti-spam and threat protection, Defender for Office 365, has improved significantly. While earlier versions were less competitive, Microsoft has invested heavily in this platform. It now meets the standards Total Networks expects and recommends for our client’s environments.
Defender is included in Microsoft Business Premium or can be purchased as a separate subscription. While no email security solution is perfect, Microsoft’s continuous development and integration with M365 licensing make it a compelling, efficient choice for many of our clients.
Keep Improving Your Security to Manage Your Risk
Strengthening your Microsoft environment is not a one-time task. It requires regular research, evaluation, and upgrades.
At Total Networks, we stay ahead of these changes so our clients don’t have to. We continuously evaluate Microsoft’s evolving security stack to ensure your firm has the tools, licensing, and strategy to reduce risk.