Kurt Shintaku's Blog

Wanna learn about Microsoft Defender ATP? Come join Heike Ritter, Program Manager for a webinar on Apr. 2, at 08:00-09:00AM PST on "Microsoft Defender ATP: End-to-end security for your endpoints".

You can register here:

• EVENT: “Microsoft Defender ATP – End-to-end security for your endpoints” – April 2nd, 8-9AM PT
  https://forms.office.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR_0A4IaJRDNBnp8pjCkWnwhUNlI1UjZJTzlCM0Q2M1dNMk1NQjJSTFM4OC4u

We will be posting recordings of the webinar at:
https://aka.ms/SecurityWebinars.

To stay informed about future webinars and other events, join our Security Community at:
https://aka.ms/SecurityCommunity.

Check out this new “Work-from-Home” eBook our Partner team here at Microsoft assembled.

In this eBook, you’ll find resources and recommended practices on work from home scenarios along with example supporting partner offerings. 

It was originally an internal guide but it’s recently been approved for sharing with partners & customers.

Use this eBook as a guide to help you enable your customers or employees to work from home.

• DOWNLOAD: eBook, “How Partners Enable Work From Home”
  https://1drv.ms/b/s!Ao0Dfn8MQdoAr7F_MdTdrETRfBzzyg?e=qTOm54

This is a must read if you have Azure Active Directory Premium P1, EMS or Microsoft 365.

There’s a nice write up about the importance & usage scenarios for Azure AD Conditional Access (as you probably expect) however there’s one REALLY important recommendation:

AZURE AD APPLICATION PROXY
Most organizations are running lots of business-critical apps on-premises, many of which may not be accessible from outside the corporate network.

Azure AD Application Proxy is a lightweight agent that enables internet access to your on-premises apps, without opening up broad access to your network.

You can combine this with your existing Azure AD authentication and Conditional Access policies to help keep your users and data secured.

For more information about App Proxy, go here.

Read the whole article here:

• Top 5 ways your Azure AD can help you enable remote work
  https://techcommunity.microsoft.com/t5/azure-active-directory-identity/top-5-ways-your-azure-ad-can-help-you-enable-remote-work/ba-p/1144691

If you missed the webinar, here’s the recording, featuring Paul Collinge, Sr Program Manager from Microsoft & Sean Sweeney, Sr Director & Chief Security Advisor, Microsoft Cybersecurity Solutions Group:

• RECORDING: Alternatives for Security Controls: Elevating Security & Performance for Remote Work
  On-Demand session 1, recorded Tuesday 3/31/20 – 9:00 AM Pacific Time

Q&A
Additionally, the Q&A thread is visible in the recording.  Notable responses include:

• Top 5 ways your Azure AD can help you enable remote work
  https://techcommunity.microsoft.com/t5/azure-active-directory-identity/top-5-ways-your-azure-ad-can-help-you-enable-remote-work/ba-p/1144691
• Q: Do we have a way to just allow the user to access to just open the B2C O365 access for the customer domain, no other one?
  A: By using Tenant restrictions https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/tenant-restrictions you can limit which tenants are accessible even with shared namespaces.
• Q: A current requirement for this to work in 100% of scenarios is to also add the IP range 13.107.60.1/32. This should not be necessary very shortly due to an update in the latest Teams client due for release w/c March 30 2020.
  A: We’re still working on getting this update out and will update the documentation when this is done. Until then adding the /32 you reference will solve the problem where it occurs. Connectivity isnt made to this IP, it’s just used to decide the routing so as long as you add it to the other IP blocks in the route table, routing will work as you wish.
• Q: How can we generate a report that documents the conditional access policies?
  A: Today there is not a way to export Conditional Access policies to generate a report. Check for updates on this feature here. https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/19198480-support-exporting-and-importing-conditional-access
• Q: What security controls required for WVD as many are opting for remote working.
  A: Conditional Access can be used to restrict access to the front door of WVD. More complete guidance is being developed and we hope to have it published soon.
• Q: Do you have any helpful tools for consultants to help clients do a quick assessment to prioritize actions
  A: From a connectivity standpoint, the tool at https://connectivity.office.com should give you a view as to connectivity on a machine and we’re working on updating the tool to capture VPN usage.
• Q: Can you comment on how best to do split tunnel with cisco asa (can’t do smart FW yet) and anyconnect 4.7? IT seems like the MS docs for o365 ip addresses are not fully correct
  A: https://docs.microsoft.com/en-us/office365/enterprise/office-365-vpn-implement-split-tunnel has a how-to guide for Cisco Anyconnect. The IP addresses published at https://docs.microsoft.com/en-gb/office365/enterprise/urls-and-ip-address-ranges and the corresponding web service is always fully up to date

UPDATE 3/31/20:
It appears that the MORNING session that occurred has been recorded and is available if you don’t have any questions and just want to review what was presented in the 90min session:

• RECORDING: Alternatives for Security Controls: Elevating Security & Performance for Remote Work
  Session 1: Tuesday 3/31/20 – 9:00 AM Pacific Time

ORIGINAL POST:
[Sorry this is so last minute but I was only told about this this morning. Yes, this is happening THIS EVENING – Tuesday 3/31/20.]

Microsoft’s VP of Cybersecurity, Ann Johnson, sent this webinar out that we’re doing this evening and thought y’all might want to join:

• Microsoft Security on “Security Controls for Remote Work”
  Session 2: Tuesday 3/31/20 – 6:00 PM Pacific Time

ADD TO CALENDAR:  Click here.

————-

WEBINAR: Security Controls for Remote Work

As companies actively move to accommodate remote workers, we realize some legacy network architectures are suddenly under enormous strain. Many organizations are now rapidly rethinking their network infrastructure design, especially for applications like Microsoft Teams and Office 365.

If this applies, we want to provide some help.

Microsoft Security is hosting a Webinar on Tuesday as follow on to the blog post: Alternative ways for security professionals and IT to achieve modern security controls in today’s unique remote work scenarios. In this webinar we will provide guidance on how to manage security in this changing environment.

Respecting very busy schedules in these unprecedented times, as well as multiples time zones, we will air the Webinar twice on Tuesday.

• Session 1: Tuesday 3/31/20 – 9:00 AM Pacific Time
• Session 2: Tuesday 3/31/20 – 6:00 PM Pacific Time

We recently wrote a post about using SCCM’s Cloud Management Gateway to manage “remote worker” machines.

• Managing remote machines with cloud management gateway in Microsoft Endpoint Configuration Manager
  https://techcommunity.microsoft.com/t5/configuration-manager-blog/managing-remote-machines-with-cloud-management-gateway-in/ba-p/1233895

If your company still insists on piping everything clients do through a VPN, including corporate traffic, Internet access, patching, etc/, here are some other ways to reduce bandwidth consumption for updates & patches:

• Manage internet data usage and Windows updates in Windows 10
  https://answers.microsoft.com/en-us/windows/forum/windows_10-networking/manage-internet-data-usage-and-windows-updates-in/5417b89b-4790-4cd9-b854-809862274447
• How to limit bandwidth for Windows Update using Settings
  If you want to minimize your internet connection impact during updates, you can use the new Delivery Optimization options to limit the bandwidth usage on your device.

1. Open Settings.
2. Click on Update & Security.

3. Click the Advanced options link.

4. On "Advanced options," click the Delivery Optimization link.

5. Click the Advanced options link.

6. Under "Download settings," check the Limit how much bandwidth is used for downloading updates in the background option.
7. Use the slider to specify (in percentage) the amount of bandwidth you want your device to use.

• How to limit bandwidth for Windows Update using Group Policy
  If you’re not running version 1709 on your machine, but you’re using Windows 10 Pro (version 1703), it’s also possible to change the Delivery Optimization settings to limit the download and uploads bandwidth using the Group Policy Editor.

1. Use the Windows key + R keyboard shortcut to open the Run command.
2. Type gpedit.msc and click OK to open the Local Group Policy Editor.

3. Browse the following path:
   Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization

4. Double-click the Maximum Download Bandwidth (percentage) policy (the equivalent to the "Download settings" option in the Settings app).

5. Select the Enabled option.

6. Under "Options," enter the download bandwidth in percentage.

7. Click Apply.

8. Click OK.

With the Coronavirus becoming more prevalent, more and more employers are allowing or encouraging their employees to work from home. Some of our customers have reached out requesting recommendations on topics related to successfully managing change and working remotely.

With that in mind, LinkedIn Learning has compiled a list of complimentary curated courses to help both managers and their employees remain engaged and productive in their daily activities while working remotely.

These courses feature top tips from remote work experts that include ways to:

I. Maximize Efficiency and Productivity of Remote Work 

• Working Remotely
• Time Management: Working From Home
• Productivity Tips: Finding Your Productive Mindset

II. Manage the Impact of Adjusting to Your New Work Environment

• Thriving @ Work: Leveraging the Connection between Well-Being and Productivity
• Managing Stress for Positive Change
• Building Resilience
• Developing Resourcefulness

III. Remotely Manage and Lead Teams 

• Leading at a Distance
• Managing Virtual Teams
• Leading Virtual Meetings

IV. Get to Know Your Remote Work Productivity Tools 

• Microsoft Teams Essential Training
• Microsoft Teams Tips and Tricks
• Microsoft Teams Quick Tips
• Microsoft Teams: Learning Shifts for Firstline Workers (2019)

Whether you’re new to remote work and looking for tips on how to be productive in your new home office, or you’re leading a team and looking for ways to keep your employees connected, we hope these resources can help you on your path to becoming more effective regardless of where you are.

Working from home offers the opportunity to maintain your workflow while allowing flexibility in how and where you get your work done. Shifting to a remote worker status can be an adjustment as you look for ways to balance home and work life, maintain focus and be fully productive. Microsoft Teams can help you stay connected to your team while providing access to all of the tools and resources you need to get your work done.

Join us to learn tips that can help set you up for success as you transition into a ‘work from home’ scenario. During this session, we’ll share:

• Guidance for setting up your home environment for work
• Best practices for maintaining your workflow while working at home
• Tips for staying connected to your team while remote
• Insights for effectively supporting a remote team

Please Note: This is not a how-to-use Teams class. If you are wanting to learn how to chat, meet and collaborate in Teams, please register for the Get Started with Teams class. Thanks!

Audience: End-Users, Team/Department Managers who are new to working from home
Prerequisites: None
Duration: 30 minutes

• LIVE Instructor-led: https://microsoftteams.eventbuilder.com/TeamsWFH
  (Limited capacity – this training’s been packed over the last week – so it’s first come, first served, but we’re expanding the number of courses in the next few weeks.)

• On-Demand version: http://microsoftteams.eventbuilder.com/event/15502

———————

This is part of a series of 9 instructor-led training courses for Microsoft Teams:

• Say hello to Microsoft Teams
• Get started with Microsoft Teams
• Run effective meetings with Microsoft Teams
• Learn to use apps in Microsoft Teams
• Learn tips for taking Microsoft Teams to the next level
• Master working from home with Microsoft Teams

They are all available at:

• Instructor-led training for Microsoft Teams
  https://docs.microsoft.com/en-us/MicrosoftTeams/instructor-led-training-teams-landing-page#pivot=home&panel=home-all

Employment psychologists have recently discussed the importance of management staying in front of employees to ensure they feel connected to the organization, despite working from home.

There are two on-demand resources we have that might be useful for organizations that want to improve their Employee Communications:

• “Employee Engagement Summit” – Recording/On-Demand
  We did a customer event with our internal Microsoft Human Resources & Employee Communications execs who went over the ways we engage our own employees.  Featuring Exec VP, Kathleen Hogan (Microsoft Human Resources, Chief People Officer), she discusses the topic of employee engagement for everything from “broad internal communications” to “industry team specific broadcasts”.  Leaders from Accentury, TSB Bank, Mondelez International, etc. are brought to discuss how they approach this evolving challenge:
  https://resources.techcommunity.microsoft.com/employee-engagement-summit-2018/
  
• Modern Communications Webinars & Resources
  This is a treasure trove of information on Employee Engagement.  It includes, among other things:15 page Microsoft Internal documentation for “Microsoft CEO Satya Nadella’s Employee Q&A Program Playbook
• 20 page Microsoft Internal documentation on “Launching & sustaining a successful internal communications campaign
• On-demand recordings of
• “Connective leaders & employees: Helping Leaders & Managers become better communicators
• “Role of Communications in the Transformation of a company
• “Using employee feedback & data to drive successful communications
• “Powerful storytelling: Creating engaging content & driving the narrative
• Empowering employees to be smart advocates for the company”
• “Driving effective internal communications campaigns”

To access the videos & content, you’ll need to register at:

• Modern Communications Webinar series:
  https://info.microsoft.com/US-NOGEP-WBNR-FY19-04Apr-24-ModerncommunicationsWebinarSeries-1630_02OnDemandRegistration-ForminBody.html

Interested in managing a Teams Live event and looking for some resources?

• Best Practices for Producing a Teams Live Event
  https://support.office.com/en-us/article/best-practices-for-producing-a-teams-live-event-e500370e-4dd1-4187-8b48-af10ef02cf42
• User Documentation for Teams Live Events – “Getting Started”
  https://support.office.com/en-us/article/get-started-with-microsoft-teams-live-events-d077fec2-a058-483e-9ab5-1494afda578a?ui=en-US&rs=en-US&ad=US
• IT Administrator Documentation for Teams Live Events – “Set up”
  https://docs.microsoft.com/en-us/microsoftteams/teams-live-events/set-up-for-teams-live-events

Microsoft CEO Satya Nadella’s Employee Q&A: Program Playbook
This is an interesting resource:  It includes "Microsoft CEO Satya Nadella’s Employee Q&A: Program Playbook”, a 15 page document that was created internally initially, that goes over how we provide Q&A for live events with 20,000 simultaneous viewers.  Areas include:

1. Our Q&A strategy and its purpose and role in employee communications
2. How we manage format and content
3. Production logistics and best practices
4. Creating a dialogue – learning and listening your employees
5. Making events accessible

Download it from here:

• Satya Nadellas’s Playbook for Q&A through Teams Live Events
  https://gateway.on24.com/wcc/gateway/elitemsftve/1969907

Note: To access the videos, you need to register at:

• Modern Communications Webinar series:
  https://info.microsoft.com/US-NOGEP-WBNR-FY19-04Apr-24-ModerncommunicationsWebinarSeries-1630_02OnDemandRegistration-ForminBody.html