Azure AD Password Protection Audit Mode or Enforce Mode in Azure AD

Question

Hi
I have installed AZADPP on my on-prem DC and a member server (Proxy). We are hybrid.

All looks ok except when I read the FAQs...

1. Does this mean that AZADPP will only be in Audit mode when a user changes the password on-prem (via Windows control+Alt+Delete)?
2. We use a lot of Azure and Office365 services, will this mean that passwords changes via MyAcccount will be Enforced instead of just Audit mode?
3. If so what is the purpose of setting Audit?

Thanks, M

Answer 1

Hello @SenhorDolas ,

Thanks for reaching out.

Yes, Audit mode is not supported when changing\setting passwords directly against Azure AD - Audit mode is only supported for on-premises AADPP.

For an example: when a password is changed or set against on-premises Active Directory, the password is only evaluated locally and depends on mode it Deny or Audit password. If a password is changed or set against Azure AD, then default AAD is implicitly always in "enforce" mode when it evaluates passwords.

Please let me know if you have any additional questions.

------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.