Enabling Password protection in Blocking mode with Exceptions

Question

We want to enforce Password Protection in Blocking mode.

However we do not want to roll it out for all users at once.

For testing purposes, can we enable it only for a small group? Using AD sync with AAD.

Thanks

Answer 1

Hi, For testing, your only option is Audit mode for everyone ( versus Enforce Mode)

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-operations#modes-of-operation

Answer 2

Hi,

Unfortunately you cannot enable it only for a small group. What you can do is set to Audit mode during your testing.

Plan and deploy on-premises Azure Active Directory Password Protection

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy

If the above was useful please click Accept Answer.

Thanks.

-TP