You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/fundamentals/active-directory-deployment-checklist-p2.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,7 +25,7 @@ Additionally customers can check their [identity secure score](identity-secure-s
25
25
26
26
## Prerequisites
27
27
28
-
Many of the recommendations in this guide can be implemented with Azure AD Free, Basic, or no license at all. Where licenses are required we state which license is required at minimum to accomplish the task.
28
+
Many of the recommendations in this guide can be implemented with Azure AD Free or no license at all. Where licenses are required we state which license is required at minimum to accomplish the task.
29
29
30
30
Additional information about licensing can be found on the following pages:
31
31
@@ -43,12 +43,12 @@ In this phase, administrators enable baseline security features to create a more
43
43
|[Designate more than one global administrator](../users-groups-roles/directory-emergency-access.md)| Assign at least two cloud-only permanent global administrator accounts for use if there is an emergency. These accounts are not be used daily and should have long and complex passwords. | Azure AD Free |
44
44
|[Use non-global administrative roles where possible](../users-groups-roles/directory-assign-admin-roles.md)| Give your administrators only the access they need to only the areas they need access to. Not all administrators need to be global administrators. | Azure AD Free |
45
45
|[Enable Privileged Identity Management for tracking admin role use](../privileged-identity-management/pim-getting-started.md)| Enable Privileged Identity Management to start tracking administrative role usage. | Azure AD Premium P2 |
46
-
|[Roll out self-service password reset](../authentication/howto-sspr-deployment.md)| Reduce helpdesk calls for password resets by allowing staff to reset their own passwords using policies you as an administrator control. |Azure AD Basic |
47
-
|[Create an organization specific custom banned password list](../authentication/howto-password-ban-bad-configure.md)| Prevent users from creating passwords that include common words or phrases from your organization or area. |Azure AD Basic |
46
+
|[Roll out self-service password reset](../authentication/howto-sspr-deployment.md)| Reduce helpdesk calls for password resets by allowing staff to reset their own passwords using policies you as an administrator control. ||
47
+
|[Create an organization specific custom banned password list](../authentication/howto-password-ban-bad-configure.md)| Prevent users from creating passwords that include common words or phrases from your organization or area. ||
48
48
|[Enable on-premises integration with Azure AD password protection](../authentication/concept-password-ban-bad-on-premises.md)| Extend the banned password list to your on-premises directory, to ensure passwords set on-premises are also in compliance with the global and tenant-specific banned password lists. | Azure AD Premium P1 |
49
49
|[Enable Microsoft's password guidance](https://www.microsoft.com/research/publication/password-guidance/)| Stop requiring users to change their password on a set schedule, disable complexity requirements, and your users are more apt to remember their passwords and keep them something that is secure. | Azure AD Free |
50
50
|[Disable periodic password resets for cloud-based user accounts](../authentication/concept-sspr-policy.md#set-a-password-to-never-expire)| Periodic password resets encourage your users to increment their existing passwords. Use the guidelines in Microsoft's password guidance doc and mirror your on-premises policy to cloud-only users. | Azure AD Free |
51
-
|[Customize Azure Active Directory smart lockout](../authentication/howto-password-smart-lockout.md)| Stop lockouts from cloud-based users from being replicated to on-premises Active Directory users |Azure AD Basic |
51
+
|[Customize Azure Active Directory smart lockout](../authentication/howto-password-smart-lockout.md)| Stop lockouts from cloud-based users from being replicated to on-premises Active Directory users ||
52
52
|[Enable Extranet Smart Lockout for AD FS](/windows-server/identity/ad-fs/operations/configure-ad-fs-extranet-smart-lockout-protection)| AD FS extranet lockout protects against brute force password guessing attacks, while letting valid AD FS users continue to use their accounts. ||
53
53
|[Deploy Azure AD Multi-Factor Authentication using Conditional Access policies](../authentication/howto-mfa-getstarted.md)| Require users to perform two-step verification when accessing sensitive applications using Conditional Access policies. | Azure AD Premium P1 |
54
54
|[Enable Azure Active Directory Identity Protection](../identity-protection/enable.md)| Enable tracking of risky sign-ins and compromised credentials for users in your organization. | Azure AD Premium P2 |
@@ -79,7 +79,7 @@ As we continue to build on the previous phases, we identify candidate applicatio
79
79
| ---- | ------ | ---------------- |
80
80
| Identify your applications | Identify applications in use in your organization: on-premises, SaaS applications in the cloud, and other line-of-business applications. Determine if these applications can and should be managed with Azure AD. | No license required |
81
81
|[Integrate supported SaaS applications in the gallery](../manage-apps/add-application-portal.md)| Azure AD has a gallery that contains thousands of pre-integrated applications. Some of the applications your organization uses are probably in the gallery accessible directly from the Azure portal. | Azure AD Free |
82
-
|[Use Application Proxy to integrate on-premises applications](../manage-apps/application-proxy-add-on-premises-application.md)| Application Proxy enables users to access on-premises applications by signing in with their Azure AD account. |Azure AD Basic |
82
+
|[Use Application Proxy to integrate on-premises applications](../manage-apps/application-proxy-add-on-premises-application.md)| Application Proxy enables users to access on-premises applications by signing in with their Azure AD account. ||
83
83
84
84
## Phase 4: Audit privileged identities, complete an access review, and manage user lifecycle
Microsoft Online business services, such as Office 365 or Microsoft Azure, require Azure AD for sign-in and to help with identity protection. If you subscribe to any Microsoft Online business service, you automatically get Azure AD with access to all the free features.
41
41
42
-
To enhance your Azure AD implementation, you can also add paid capabilities by upgrading to Azure Active Directory Basic, Premium P1, or Premium P2 licenses. Azure AD paid licenses are built on top of your existing free directory, providing self-service, enhanced monitoring, security reporting, and secure access for your mobile users.
42
+
To enhance your Azure AD implementation, you can also add paid capabilities by upgrading to Azure Active Directory Premium P1 or Premium P2 licenses. Azure AD paid licenses are built on top of your existing free directory, providing self-service, enhanced monitoring, security reporting, and secure access for your mobile users.
43
43
44
44
>[!Note]
45
45
>For the pricing options of these licenses, see [Azure Active Directory Pricing](https://azure.microsoft.com/pricing/details/active-directory/).
46
46
>
47
-
>Azure Active Directory Premium P1, Premium P2, and Azure Active Directory Basic are not currently supported in China. For more information about Azure AD pricing, contact the [Azure Active Directory Forum](https://azure.microsoft.com/support/community/?product=active-directory).
47
+
>Azure Active Directory Premium P1and Premium P2 are not currently supported in China. For more information about Azure AD pricing, contact the [Azure Active Directory Forum](https://azure.microsoft.com/support/community/?product=active-directory).
48
48
49
49
-**Azure Active Directory Free.** Provides user and group management, on-premises directory synchronization, basic reports, self-service password change for cloud users, and single sign-on across Azure, Office 365, and many popular SaaS apps.
50
50
51
-
-**Azure Active Directory Basic.** In addition to the Free features, Basic also provides cloud-centric app access, group-based access management, self-service password reset for cloud apps, and Azure AD Application Proxy, which lets you publish on-premises web apps using Azure AD.
52
-
53
51
-**Azure Active Directory Premium P1.** In addition to the Free and Basic features, P1 also lets your hybrid users access both on-premises and cloud resources. It also supports advanced administration, such as dynamic groups, self-service group management, Microsoft Identity Manager (an on-premises identity and access management suite) and cloud write-back capabilities, which allow self-service password reset for your on-premises users.
54
52
55
53
-**Azure Active Directory Premium P2.** In addition to the Free, Basic, and P1 features, P2 also offers [Azure Active Directory Identity Protection](../identity-protection/enable.md) to help provide risk-based Conditional Access to your apps and critical company data and [Privileged Identity Management](../privileged-identity-management/pim-getting-started.md) to help discover, restrict, and monitor administrators and their access to resources and to provide just-in-time access when needed.
0 commit comments