Fehlende MFA für privilegiertes Konto

HIGH

Version 202608241311

Aug 24, 2026, 1:11 PM

  • Detection (Ignore the accounts which are privileged only because they are assigned the "Directory Synchronization Accounts" or "On Premises Directory Sync Account" role, since these Microsoft Entra Connect and Cloud Sync service accounts cannot use MFA without breaking the synchronization)
  • Metadata (Explain that the Microsoft Entra Connect and Cloud Sync service accounts must be excluded from the recommended Conditional Access policy, since they cannot comply with an MFA requirement)

Release: 202608241311

Version 202510271638

Oct 27, 2025, 4:38 PM

  • Metadata (use tables instead of long lists in weakness details)

Release: 202510271638

Version 202507150942

Jul 15, 2025, 9:42 AM

  • Detection (Remove duplicate role assignments in displayed incriminating attributes)

Release: 202507150942

Version 202405221632

May 22, 2024, 4:32 PM

  • New

Release: 202405221632