free780 Posted January 16, 2020 Posted January 16, 2020 (edited) It should only affect office 2007/2010. Unless you don't have modern authentication enabled. I would block legacy authentication as imap and SMTP are leveraged in phishing attacks. Edited January 16, 2020 by free780 1
chaplic Posted January 16, 2020 Posted January 16, 2020 Agree with 780 - this is a workaround not a fix. MS are actually planning to turn OFF basic auth completely later in the year so if you don't act you'll have another outage. Outlook 2016 does not need basic auth. The only thing I can think of as to why outlook 2016 seemingly needs basic auth is if you have turned off ADAL (enableADAL registry key to 0) there's some very unusual outlook plugin, or your proxy is causing trouble. 1
free780 Posted January 17, 2020 Posted January 17, 2020 Yes theres a requirement for SMTP auth. In October legacy auth will be disabled. If you have legacy systems you need a hybrid setup or better still update them to support tighter security. I'd test with a test user to make sure ADAL works and turn it on. You can check how users are authenticating with https://aad.portal.azure.com go into users and check sign ins. 1
Chuckster Posted January 17, 2020 Author Posted January 17, 2020 There are quite a lot of features unavailable unless I purchase a premium plan. As a result I am unable to view how users are authenticating on the AAD Portal. On a workstation, when I load Outlook 2016 I get a popup stating "This feature has been disabled by your administrator". I created the following registry to work with modern authentication, but it made no difference... Location: HKCU\SOFTWARE\Microsoft\Office\16.0\Common\IdentityType: REG_DWORDName: EnableADALValue: 1 What do I need to do in order to achieve modern authentication?
chaplic Posted January 17, 2020 Posted January 17, 2020 (edited) Just with 1 Azure AD Premium license you unlock everything and there is usually a trial setup, might be handy You shouldn't have to do anything to the 2016 client, adal is ON. If you have a old tennant, it might be off at that end https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/enable-or-disable-modern-authentication-in-exchange-online Not sure about the popup, is that just a plugin disabled by GPO? Edited January 17, 2020 by chaplic
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now