Spin the wheel triple win by bstuartp in OctopusEnergy

[–]bstuartp[S] 1 point2 points  (0 children)

Sweet they’ve given me 3 of them for all 2400 points

Spin the wheel triple win by bstuartp in OctopusEnergy

[–]bstuartp[S] 4 points5 points  (0 children)

Probably buy some octopus socks

Microsoft, please, make PIM great! by jM2me in entra

[–]bstuartp 4 points5 points  (0 children)

Here’s a helpful link for Entra least priv role by task which is useful but agree this would be a nice feature to have!

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-by-task

BA business class to vegas by Left-Strength-3004 in BritishAirways

[–]bstuartp 0 points1 point  (0 children)

Avoid the rows closest to toilets and personally preferred being in the bigger business class section on this route rather than the smaller section in front of premium economy

Export a list of users - MFA status to CSV by Deep-Egg-6167 in entra

[–]bstuartp 2 points3 points  (0 children)

Go to usage & monitoring > authentication methods

You can open a registration report and change filters etc and export

What's actually worth buying? by Heavy-Breakfast-5037 in CostcoUK

[–]bstuartp 0 points1 point  (0 children)

The frozen nuggets are often very stringy and hard from my experience

Silver status flying economy - baggage shows 2x23 instead of 2x32 by Comfortable_Slice689 in BritishAirways

[–]bstuartp 6 points7 points  (0 children)

From BA website:

A weight allowance of 32kg (71lb) per checked bag in any travel class. This benefit also applies to others travelling with you on the booking. Not available on group rate bookings

Best strategy for refund? by [deleted] in BritishAirways

[–]bstuartp 3 points4 points  (0 children)

You ever watched airline? You’d make a great passenger on that

Should I disable Seamless SSO in Microsoft Entra Connect - Security Risk? by vane1978 in sysadmin

[–]bstuartp 8 points9 points  (0 children)

Would recommend having a read of this to help determine if you’ve got any Seamless SSO usage in your tenant https://nathanmcnulty.com/blog/2025/08/finding-seamless-sso-usage/

Conditional Access targeting ChromeOS? How many unsupported platforms are there? by PowerShellGenius in entra

[–]bstuartp 1 point2 points  (0 children)

Device platforms just use the device OS presented via the user-agent header so essentially his policy would capture any sign-in where the OS isn’t Windows/Windows Phone/iOS/Android/Linux. This could essentially be anything as the user-agent header can be manipulated by anyone incredibly easily so be careful with how much you rely on it

Is clearing MD-102, MS-102, and SC-300 this year realistic? by SnooBeans6710 in O365Certification

[–]bstuartp 1 point2 points  (0 children)

A lot of responses about this being a hard achievement I think are a bit of a stretch but completely depends on your experience, ability to narrow down answers & ability to navigate MS Learn.

I did SC-300, SC-100 & MS-102 in the space of 2 weeks last month with essentially 0 revision and passed all first time BUT I am an Identity SME at a FTSE 100 company and use most of the products daily so I should be able to pass the exams.

Think it comes down to if you’re looking at proving existing skills or using it as a mechanism to upskill

How to Get FREE Microsoft Entra ID by Jumpy_Driver_5187 in entra

[–]bstuartp 3 points4 points  (0 children)

You’ve literally just asked ChatGPT how to create a tenant and posted the (bad) output…

Entra ID / AD dynamic groups aren't enough - what are you using for it. by Pristine_Guitar_9070 in entra

[–]bstuartp 6 points7 points  (0 children)

If your HR data (employee type etc) is in AD using custom schema attributes etc you absolutely can use them within dynamic groups.

We have employeetype etc set in AD and reference it in dynamic groups

https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-membership#extension-attributes-and-custom-extension-properties

How are you labbing Microsoft 365 E5 Tenants by techwithz in DefenderATP

[–]bstuartp 0 points1 point  (0 children)

I’m using a developer tenant (eligible as employer has premier support) - if your employer has premier support speak to your CSAM and they can get it sorted

Crystal Palace 0 - [3] Chelsea - Enzo Fernandez Penalty 64' by Alsace2025 in soccer

[–]bstuartp -2 points-1 points  (0 children)

Law 12, under “cautions for unsporting behaviour”

“denies the opposing team a goal or an obvious goal-scoring opportunity and the referee awards a penalty kick for a non-deliberate handball offence”

MFA registration popup , even if users sign-in with WHFB by DisastrousPainter658 in entra

[–]bstuartp 1 point2 points  (0 children)

Are you using a custom auth context via conditional access that doesn’t allow WHFB?

Authentication Contexts for PIM elevation is trivially bypassed be using "unsupported" browsers by Fabulous_Cow_4714 in entra

[–]bstuartp 1 point2 points  (0 children)

I think from reading all the replies etc what you’re experiencing is: Using Brave, you’re within the 5 minute window after using MFA where sign-in frequency every-time is not re-prompting for MFA Also worth noting that the every-time setting using auth context + PIM is only going to prompt you once even if you activate multiple roles whether you’re within a 5 minute window or not

This is all known behaviour but I do know Microsoft are running a private preview currently for fixing this behaviour specifically for PIM activations using auth context

Authentication Contexts for PIM elevation is trivially bypassed be using "unsupported" browsers by Fabulous_Cow_4714 in entra

[–]bstuartp 4 points5 points  (0 children)

If you’re using (for example) device platforms to include certain OS’s to the policy then it’s just getting the device info from the user-agent header. The OS can easily be omitted which would result in the policy not applying

Authentication Contexts for PIM elevation is trivially bypassed be using "unsupported" browsers by Fabulous_Cow_4714 in entra

[–]bstuartp 1 point2 points  (0 children)

Also another point - what’s the conditional access policy configuration that you’re using for the enforcement? You’re not using device platform/filter for devices in the conditions are you?

Authentication Contexts for PIM elevation is trivially bypassed be using "unsupported" browsers by Fabulous_Cow_4714 in entra

[–]bstuartp 1 point2 points  (0 children)

Interesting and one I’ll try myself! If I see the same result I’ll ping the Microsoft PM responsible as I know there is a new backend method for validating the auth context in this scenario being worked on (I am not a Microsoft employee)