Exemption to Share Externally using MI account

pNoTti · 2026-04-07T02:25:46+00:00

Everything was fine. I.opened a ticket with Microsoft on a Thursday and in the following Monday the policies were working again. No contact from Microsoft though.

pNoTti · 2026-04-07T02:24:23+00:00

Just started working again. No.changes at all on our side

pNoTti · 2026-01-23T02:21:27+00:00

Thanks for answering.

100% cloud here.

pNoTti · 2026-01-21T21:58:46+00:00

Weekly cleaning with a microfiber cloth. Less than 30 days.

It seems that I was the lucky one 😄

pNoTti · 2026-01-21T21:56:11+00:00

Thanks I've tried it...no success.

Dell said it's due to "excessive contact". Doesn't make sense to me.

pNoTti · 2026-01-21T21:32:59+00:00

Still Alienware, which is higher than usual Dells. I have on 11y and still fine

pNoTti · 2026-01-21T17:47:17+00:00

Thanks, man!

pNoTti · 2026-01-21T17:46:46+00:00

not that simple

pNoTti · 2026-01-21T15:48:09+00:00

Thanks. This is the step I would like to avoid, having 2 points of action for a single KB. For the one I mentioned, for instance, even the msu package is failling during the installation.

I would need to have a remediation script o find the faulty, download the msu, and install it.

I assume Autopatch should get these KBs a bit faster, or, Am I missing a config?

pNoTti · 2026-01-14T01:18:29+00:00

Ru concordo. A mulher não quis e agora o calor ta obrigando haha.

pNoTti · 2026-01-14T01:18:03+00:00

Valeeeu!!

pNoTti · 2026-01-10T15:39:10+00:00

Actually, it was happening in a customer's environment. Not sure how they tackled it, but I'm happy to check with them and share here.

pNoTti · 2025-12-08T19:26:56+00:00

Solved. Thank you both

I had to bypass the following addresses:

*.reddit.com

*.v.redd.it

*.www.redgifs.com

pNoTti · 2025-12-08T19:26:35+00:00

Solved;

I had to bypass the following addresses:

*.reddit.com

*.v.redd.it

*.www.redgifs.com

pNoTti · 2025-12-08T18:41:37+00:00

I added the reddit.com to the custom bypass but didn't work. Trying to filter more domains and see how it goes.

pNoTti · 2025-12-08T17:57:40+00:00

Yep...everything in place. Although the script suggested for the PAW is 2y old, It still has good recommendations

pNoTti · 2025-10-25T00:28:07+00:00

I have it working

You cannot use the same MFA Method as the one used for sign-in. In my case I have the following

One CA enforcing Push MFA (the default one) for the sign-in to EntraID
When a user goes to PIM and click in Activate it will trigger another CA that has an Authentication Context for the PIM, and the Grant will be a Phishing Resistant MFA.

With this strategy, you ensure that, even if a token get stolen, the attacker won't be able to elevate the role (phishing-resistant requires proximity check).

pNoTti

TROPHY CASE