AzureAD Settings

[free780]

Good Morning

 

Please check your AzureAD User Settings to prevent users from creating tenants. This setting has appeared and enabled by default on some tenants.

 

 

 

[DalekSec]

Was on for us! Why is this on by default!....

[rush_tech]

Was on here too!

[mavhc]

Why is it being on a bad thing?

[DalekSec]

Why is it being on a bad thing?

 

I only like having 1 Tenant, and that's David

[KK20]

In the words of Sam, "Oh boy"

 

I especially like the bit "anyone who creates a tenant will become the global administrator for that tenant"

Edited November 18, 2022 by KK20

[Boredguy]

Time to update all 6 Tenancies....

[mavhc]

It's always been on, what bad things have happened so far?

[KK20]

Nothing our end, I imagine because the admin portal is locked down and you need the admin portal to be available in order to create a new tenant (afterall the first step is "log into the admin portal"). However, I am not sure if there are third party apps that can bypass this or powershell commands that do not need the admin portal - they would only need the rights to be able to do so.

 

That being said, the first tooltip from "Restrict access to Azure AD administration portal" is "this is not a security measure"

Edited November 18, 2022 by KK20

[DalekSec]

It's always been on, what bad things have happened so far?

 

Just because something bad hasn't happened yet, doesn't mean it's not going to happen.

[Michael]

Was on for all my tenants... now off for all my tenants.

 

I'm just not sure in practice how it'd work or be possible, especially the hoops you have to go through to prove you're a school, or pay up if you're a business customer!

[jblackburnHWGA]

omg lol it was on! I didn't notice that before

[mavhc]

The toggle button didn't exist before, it's always been on