Microsoft 365 to Block Legacy Authentication Protocols Starting Mid-July
For Microsoft 365 customers, there is an important change in July: from the middle of the month, Microsoft will block various outdated authentication protocols by default. If you still use this, you should take care of alternatives quickly.
In mid -July is over
This measure is part of the Secure Future Initiative (SFI) and the Secure by Default strategy, the company said. The aim is to significantly improve the safety of the Microsoft 365 environment-but for companies with older systems, this could lead to a labor-intensive summer. According to a current message in the Microsoft 365 Message Center (MC1097272) the changeover begins in mid -July and is expected to be completed by August. The focus is on the so-called Remote PowerShell (RPS) authentication for SharePoint and OneDrive. This older protocol is particularly susceptible to brute force and phishing attacks because it does not support modern authentication.
The frontpage Remote Procedure Call (RPC) protocol-is also affected by a remnant of the web design tool Microsoft Frontpage, set almost 20 years ago. Although the program has long been history, the protocol behind it remained astonishingly long in use. But here, too, Microsoft is now pulling the ripcord: Due to the increased susceptibility to attacks, the RPC protocol is blocked.
Apps only via admin
Another central point of the changes concerns third-party apps: In the future, they will need the express consent of an administrator in order to be able to access files and websites in Microsoft 365. Microsoft justifies this step with the risk of uncontrolled data release by end users. The shift in decision -making skills to administrators should reduce the risk of excessive approval of information.
For users, this means: If you want to use a third-party app, you have to obtain approval from the admin beforehand. Microsoft emphasizes that the new settings will apply automatically and for all Microsoft 365 customers. Companies that have not yet dealt with the changeover should therefore act quickly – especially to ensure smooth processes in everyday work.
