Windows 10: Azure Password Protection DC Agent Requirements

PhillipOyekanmi1 · Jul 19, 2022

Just some concerns around the DC requirements for the Azure Password Protection DC Agent. As per Microsoft Official site, it is started that Windows 2012 R2 and Above is supported. However, we have Windows 2008 DC and we are looking to build a new Windows 2016 Server. The Question is do we have to install the DC Agent in all the DC - Domain Controller or we are ok with installation on a 2016 DC with 2008 co- DC's https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy

:)

WojtekSzk · Jul 19, 2022

Azure AD Banned Password List without On-Prem Agent

Hi All,

I am considering enabling banned password list for our Azure AD in our hybrid environment and want to ask, how doing that will affect our environment if we do not install the on-prem DC agent, as our on-prem does not meet minimum requirements.

Which password resets and changes will be validated through banned password list and which will not?

Will 'noncompliant' passwords synced from on-prem to Azure AD be causing issues?

TIA,

W

Nikhar_K · Jul 19, 2022

Azure AD Banned Password List without On-Prem Agent

Hi,

Thank you for writing to Microsoft Community Forums.

I understand your query regarding Azure AD Banned Password list without On-Prem agent.

We do have a dedicated forum for issues concerning to Azure AD, let me point you in the right direction, where you may find appropriate support for the issue. I would suggest you to post your query in
Microsoft Q&A, where we have support professionals to address your query.

Article for reference:

Eliminate bad passwords in your organization

Configuring the custom banned password list

Azure AD Password Protection on-premises - Frequently asked questions

I hope your query gets resolved at the earliest.

Regards,

Nikhar Khare

Microsoft Community - Moderator

Brink · Jul 19, 2022

Announcing Microsoft Azure IoT Device Agent V2 general availability

We are excited to announce the general availability of Microsoft Azure IoT Device Agent V2. The Microsoft Azure IoT Device Agent is an open-source, ready-to-build and package solution for Windows 10 IoT Enterprise and Windows 10 IoT Core operating systems that provides you with built-in capabilities to remotely provision, configure, monitor and manage your IoT devices.

When it comes to the widespread deployment of IoT devices, one of the key challenges is around remote manageability. IoT devices are deployed out in the field or on factory floors where direct device access is not always possible or practical. As an operator, you also want to ensure that you can deploy software and security updates across all the IoT devices in the field to protect and secure the data as well as the device.

What’s new

The Microsoft Azure IoT Device Agent has been in public preview since Jan 2019. If you were using our public preview version, we hope you found it useful and we are eager to know your feedback. With GA, you now have access to the following new features:

1) UWP Management Plugin and UWP bridge: You can now remotely manage your UWP app running on your devices using the UWP management plugin. The Device Agent now includes a UWP bridge which allows UWP applications to leverage a subset of the Device Agent capabilities such as TPM access and reboot.

2) Diagnostics and error reporting: Troubleshooting issues on your IoT devices is a lot easier with quick access to collect logs and error information from the device and upload them to Azure Storage.

3) Device Agent extensibility: Ready-to-use Visual Studio templates and Nugets make it easy for a device developer to create their own plugins and extend the Device Agent’s capabilities.

See the complete list of capabilities below for more information.

Microsoft Azure IoT Device Agent capabilities

The Microsoft Azure IoT Device Agent provides you with the following capabilities to support these scenarios:

Device provisioning: The Microsoft Azure IoT Device Agent integrates with the Azure Device Provisioning Service (DPS) client SDK to automatically provision and create the Azure IoT Hub identities of the device using the Azure Device Provisioning Service. The Device Agent registers the device with the Azure IoT Hub, ensuring the identity assignment of the device and applications running on it. The Microsoft Azure IoT Device Agent leverages Azure IoT Module twin such that each process that connects to the IoT Hub is associated to the same IoT Hub device. If your solution demands that you have a custom provisioning client, you can do so by downloading the Azure Device Provisioning Service device SDK and implementing your own provisioning service.

Manage cloud connectivity: Once the Microsoft Azure IoT Device Agent establishes the connection with the IoT Hub, it continues to manage the Azure cloud connection and the renewal of the SAS token before it expires.

Remote device management: The Microsoft Azure IoT Device Agent provides the following remote device management capabilities via built-in plugins:

Device info: Enables you to retrieve information like Device ID, manufacturer information, firmware version, etc.

Reboot: Enables you to remotely reboot the device or schedule a reboot.

Remote wipe: Enables you to wipe out all data on the device and restore the device to a clean state.

Factory reset: Enables you to apply a factory image on the device bringing it back to its original state.

Time management: Enables you to configure an NTP service and set the time zone on the device.

Windows Update management: Enables you to enforce OS update policies on the device.

Certificate management: Enables you to remotely install or uninstall certificates.

Windows telemetry management: Enables you to configure the level of telemetry that is being reported from the device.

Device Agent’s extensibility: As a device builder, you can write your own plugins which can interface with the Microsoft Azure IoT Device Agent. The Device Agent makes it easy for you to build your own custom code by providing you with the following hooks:

Includes a plugin model to bridge platform components with the agent and consequently with IoT Hub. The plugin model enables discovery, initialization, error reporting and state aggregation. The model includes a Visual Studio template and Nugets, which help you to quickly create your own plugin while abstracting the communication between the Device Agent and your plugin.

When a handler has dependencies on other handlers, Azure IoT Device Agent can make sure that the dependencies are processed in the right order.

Handlers have a versioning model to prevent mismatches in twin schemas or mismatches between plugin versions and the Device Agent.

Remote UWP application management: As a solution operator you can now remotely deploy, update, remove, start, or stop UWP applications on your devices using the UWP management plugin. On Windows IoT Core, you can also designate an application to be the start-up application.

Device Agent plugin capabilities in UWP apps: UWP applications can also leverage the UWP bridge, which enables the UWP application to leverage a limited subset of the functionalities of the Device Agent such as retrieving DPS enrollment information from the TPM or accessing admin-privileged functionality such as reboot.

Diagnostics and error reporting: Errors and diagnostics logs are now easily accessible for troubleshooting purposes using the Microsoft Azure IoT Device Agent.

Solution operators can now collect ETW logs on their IoT devices and upload them back to the cloud for inspection.

The error reports have been enhanced to now include details of the sub-system or the process where the error originally occurred helping users to better interpret error messages.

Getting started

Check out the Quick Start for more information or download the code or exe from this GitHub repo.

We want to hear from you!

As always, your feedback is very important to us! Please share your comments, questions, or concerns on our or comment below. We’re listening!
Click to expand...

Source: Microsoft Azure IoT Device Agent V2 general availability - Windows Developer Blog

Tweet

— Twitter API (@user) View on Twiiter
Click to expand...

Windows 10: Azure Password Protection DC Agent Requirements

Azure Password Protection DC Agent Requirements

Azure Password Protection DC Agent Requirements

Azure Password Protection DC Agent Requirements

Azure Password Protection DC Agent Requirements - Similar Threads - Azure Password Protection

Laptop: AD Joined PC from On-prem DC to DC in Azure.

azure vm agent unknonw

azure vm agent unknonw

azure vm agent unknonw

Azure Monitoring Agent

Azure Monitoring Agent

Azure Monitoring Agent

Azure Password Protection DC Agent Requirements

Azure AD Banned Password List without On-Prem Agent