Microsoft Entra Password Protection for On-Prem AD: The Clean Teardown
The previous two posts in this series stood up Microsoft Entra Password Protection on an on-prem AD forest — Part 1 walked the architecture and prerequisites, Part 2 walked the…
Tag: DC Agent
Microsoft Entra Password Protection for On-Prem AD: The Deployment Walk
Part 1 of this series covered the architecture and prerequisites — the cloud-versus-on-prem split, the proxy-as-egress design, the network ports, the licensing matrix, the FRS-versus-DFSR Sysvol gotcha. With those out…
Microsoft Entra Password Protection for On-Prem AD: Architecture and Prerequisites
Standard Active Directory password policy enforces shape — minimum length, complexity, history, age. Shape doesn’t catch P@ssw.rd or Admin@123: both pass complexity; both are in every credential-stuffing wordlist on the…