Authentication Methods, Password Protection Custom Banned Password List

Question

Authentication Methods, Password Protection Custom Banned Password List

TCB-DSB 0

Curious to see if anyone else has noticed that 4-digit year values in the Custom Banned Password List within Authentication Methods, Password Protection with Azure AD Password Protection DC Agent implemented are not validated/respected and are allowed when they should not be?

1 answer

Your answer

Answer 1

Ashok M 6,846

Hi,

Can you check the mode whether its Audit or Enforced?

Microsoft Entra Password Protection can only validate passwords during password change or set operations. Passwords that were accepted and stored in Active Directory prior to the deployment of Microsoft Entra Password Protection will never be validated and will continue working as-is.

It could be possible that the password is accepted because of score post the evaluation.

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad

If the above suggestion helps, please click on 'Accept answer' and 'upvote' it.

TCB-DSB 0 Reputation points

2025-03-28T13:18:05.58+00:00

Hi Ashok,

Thank you for the info! The mode is set for Enforced, which is great, and we have successfully against other terms in the custom banned list. I think you are on to something with the scoring. We will dig a little further down that path. Cheers!
Sakshi Devkante 4,390 Reputation points Microsoft External Staff Moderator

2025-03-31T12:25:10.7966667+00:00

Hello TCB-DSB,

Just checking in to see if the above answer provided by @Ashok M helped.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Sakshi Devkante 4,390 Reputation points Microsoft External Staff Moderator

2025-04-01T11:15:44.3+00:00

Hello TCB-DSB,

Just checking in to see if the above answer provided by @Ashok M helped.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
TCB-DSB 0 Reputation points

2025-04-01T13:06:24.9233333+00:00

Hi Sakshi, thanks for checking in. After doing some additional tests, I do think that what we are seeing is tied to the scoring algorithm, so we are good for the moment. Cheers!

Share via

Authentication Methods, Password Protection Custom Banned Password List

1 answer

Your answer