Chat now with support
Chat with Support

Enterprise Reporter 3.5.1 - Whats New

Ability to collect and report on password protection settings

Ability to collect and report on password protection settings

Users can create passwords that use common words and can be exposed by dictionary-based attacks. To enforce strong passwords, you can use Azure Active Directory Password Protection to enforce a global and custom banned password list. A password change request fails if there is a match in the banned password lists.

Enterprise Reporter now collects and reports the following Azure and on-premises password protection settings fields:

 
Table 1. Collected Password Protection settings fields
Field Name
Description

Lockout duration

Lockout duration in seconds after the threshold is reached for unsuccessful password attempts.

Lockout threshold

Lockout threshold for how many unsuccessful attempts to enter a password are allowed.

Custom banned password list enforced

Enforcing the custom banned passwords list is enabled.

Banned passwords

List of banned passwords.

On-premises password protection mode

Mode, such as audit or enforce, for checking on-premises banned passwords. For audit, event log messages are generated but passwords are changed. For enforce, a password change request fails if there is a match in the banned password list.

Enable on-premises password protection

Checking for on-premises banned passwords is enabled.

The password protection fields are collected by the Azure Active Directory discovery and are included in the Azure | Active Directory | Azure Tenant Information report. The fields are also visible in the list of available fields in Edit Report if you are creating a custom report.

Ability to collect Azure user activity information

You can select an option in the Scope page for Azure Active Directory discoveries to collect user activity information such as what licenses a user has assigned, when a license was assigned to a user, and the last activity dates for different license services.

New library reports

The following new library reports were added:

Active Directory | Health Check | Active Directory

•
Accounts Where SID History Attribute Contains SID From Same Domain

Microsoft 365

•
Microsoft 365 Active Users

Updates to libraries

•
Upgraded Microsoft Graph for all cloud discoveries. Microsoft Graph version 5.7 is used.
•
The Azure Active Directory PowerShell and MSOnline PowerShell modules have been deprecated by Microsoft. As a result, some Azure Active Directory collections have been migrated to use Microsoft Graph.
•
Remote PowerShell (RPS) Protocol in Exchange Online PowerShell has been deprecated by Microsoft. Enterprise Reporter is now using ExchangeOnlineManagement 3.4 library.
•
AzureRM PowerShell module has been deprecated by Microsoft and replaced with MSAL (Microsoft.Identity.Client v4.49.1).
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating