Merge pull request #34173 from wwlpublish/cc69f55ae4ac1af9eb1510a1e6f465f4-live

v-ccolin · web-flow · commit d641b6120c39 · 2023-04-25T09:02:32.000+01:00
Modules/M01-protect-identities-azure-acative-directory
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/1-introduction.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/1-introduction.yml
@@ -4,7 +4,7 @@ title: Introduction
 metadata:
   title: Introduction
   description: "Introduction"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/2-explore-windows-hello-for-business.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/2-explore-windows-hello-for-business.yml
@@ -4,7 +4,7 @@ title: Explore Windows Hello for Business
 metadata:
   title: Explore Windows Hello for Business
   description: "Explore Windows Hello for Business"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/3-deploy-windows-hello.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/3-deploy-windows-hello.yml
@@ -4,7 +4,7 @@ title: Deploy Windows Hello
 metadata:
   title: Deploy Windows Hello
   description: "Deploy Windows Hello"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/4-manage-windows-hello-for-business.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/4-manage-windows-hello-for-business.yml
@@ -4,7 +4,7 @@ title: Manage Windows Hello for Business
 metadata:
   title: Manage Windows Hello for Business
   description: "Manage Windows Hello for Business"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/5-explore-identity-protection.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/5-explore-identity-protection.yml
@@ -4,7 +4,7 @@ title: Explore Azure AD identity protection
 metadata:
   title: Explore Azure AD identity protection
   description: "Explore Azure AD identity protection"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/6-manage-self-service-password-reset.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/6-manage-self-service-password-reset.yml
@@ -4,7 +4,7 @@ title: Manage self-service password reset in Azure AD
 metadata:
   title: Manage self-service password reset in Azure AD
   description: "Manage self-service password reset in Azure AD"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/7-implement-multi-factor-authentication.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/7-implement-multi-factor-authentication.yml
@@ -4,7 +4,7 @@ title: Implement multi-factor authentication
 metadata:
   title: Implement multi-factor authentication
   description: "Implement multi-factor authentication"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/8-knowledge-check.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/8-knowledge-check.yml
@@ -4,7 +4,7 @@ title: Knowledge check
 metadata:
   title: Knowledge check
   description: "Knowledge check"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/9-summary.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/9-summary.yml
@@ -4,7 +4,7 @@ title: Summary
 metadata:
   title: Summary
   description: "Summary"
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/1-introduction.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/1-introduction.md
@@ -1,4 +1,5 @@
 
+
 As the number of different sets of credentials that one should manage increases, password security becomes weaker and weaker. Users often use the same or similar passwords for their private email accounts, social networks, and business accounts. This results in a scenario, where a security breach of any user’s digital identity can jeopardize all other identities. Because of this, it’s recommended that you use more authentication methods when authenticating against business resources and alternative methods for authentication. In addition, you should use technologies that can monitor user identities and user account behavior and proactively work to protect and prevent attacks.
 
 #### Objectives
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/2-explore-windows-hello-for-business.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/2-explore-windows-hello-for-business.md
@@ -1,4 +1,5 @@
 
+
 On Windows 11 or later clients, Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and uses biometric authentication or a PIN.
 
 Windows Hello addresses the following problems with passwords:
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/3-deploy-windows-hello.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/3-deploy-windows-hello.md
@@ -1,4 +1,5 @@
 
+
 There are many options from which you can choose when deploying Windows Hello for Business. Providing multiple options ensures nearly every organization can deploy Windows Hello for Business. Providing many options makes the deployment appear complex, however, most organization will realize they've already implemented most of the infrastructure on which the Windows Hello for Business deployment depends. It’s important to understand that Windows Hello for Business is a distributed system and does take proper planning across multiple teams within an organization.
 
 > [!NOTE]
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/4-manage-windows-hello-for-business.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/4-manage-windows-hello-for-business.md
@@ -1,4 +1,5 @@
 
+
 Windows Hello for Business provides organizations with a rich set of granular policy settings with which they can use to manage their devices and users. As noted before, you can manage and deploy Windows Hello for Business by using Group Policy or by using a modern management approach, with Microsoft Intune.
 
 ### Manage Windows Hello for Business with Intune
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/5-explore-identity-protection.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/5-explore-identity-protection.md
@@ -1,4 +1,5 @@
 
+
 Besides protecting resources such as devices, documents, and other critical types of data, it’s necessary to protect user identities, as well. Most of today’s successful cyber attacks are based on identity theft. This makes identity protection, especially of user accounts that have privileges, important for organizations of all sizes.
 
 Each computer user today has at least five, and often more than five, identities (or accounts) for accessing different local or internet-based resources. For example, a typical user has personal accounts with Microsoft, Google, or Apple for emails; social accounts on Facebook and Twitter; and a business account on LinkedIn. Added to this, a typical information worker usually has one or more business accounts that they use on information systems in the organization where they work. Because of all this, a typical user must remember several sets of credentials to be able to access the personal and business resources that they use. This usually leads to a situation where most of the passwords for these accounts are similar or, in the worst case, even the same. This fact greatly increases the risk of identity theft. If one set of credentials is stolen or discovered in any way, it’s highly likely that the other identities of the same user will be at a severe risk.
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/6-manage-self-service-password-reset.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/6-manage-self-service-password-reset.md
@@ -1,4 +1,5 @@
 
+
 When you use only on-premises AD DS, your users can't reset their forgotten passwords by themselves. AD DS in Windows Server doesn't natively support self-service password reset.
 
 Azure AD optionally provides the self-service password reset functionality. If you use Azure AD Premium P1 or P2 licensing, you can extend this functionality to your local AD DS, when you use the self-service password reset together with the password writeback functionality. When you do this, passwords that users reset in Azure AD are written back to AD DS on premises. This means that a user can change his or her password in both a cloud or on-premises environment.
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/7-implement-multi-factor-authentication.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/7-implement-multi-factor-authentication.md
@@ -1,4 +1,5 @@
 
+
 Multi-factor authentication (MFA) adds an extra security layer in the authentication process by requiring more than one method of authentication to detect and validate user identity. Users still require usernames and passwords to sign in to your data and applications, but you can add another access method as a second method of authentication. The multi-factor authentication technology combines something that you know, such as a password or a PIN, with something that you have, such as your phone or a token, and even possibly something that you are (biometric technologies).
 
 You can implement multi-factor authentication in different ways based on users’ demands and the level of extra security that they need. The following are some ways to implement MFA:
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/8-knowledge-check.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/8-knowledge-check.md
@@ -1,2 +1,3 @@
 
+
 Choose the best response for each of the questions below. Then select **Check your answers**.
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/includes/9-summary.md b/learn-pr/wwl/protect-identities-azure-acative-directory/includes/9-summary.md
@@ -1,2 +1,3 @@
 
+
 Windows Hello enables organizations to implement two-factor authentication, while providing an easier authentication experience for users on devices that support biometric sign-in. Windows Hello can be implemented in cloud, on-premises and hybrid environments. Azure AD Identity Protection actively monitors authentications, evaluates the circumstances, and calculates potential risk, such as consecutive logins from different locations. Azure AD also provides the ability for users to reset their own password, while giving Administrators the ability to configure the criteria required to complete the task. With Azure Active Directory Multi-Factor Authentication, organizations can configure users provide two or more credentials (such as a PIN and a mobile phone) to sign in to devices and access resources.
diff --git a/learn-pr/wwl/protect-identities-azure-acative-directory/index.yml b/learn-pr/wwl/protect-identities-azure-acative-directory/index.yml
@@ -1,14 +1,14 @@
 ### YamlMime:Module
 uid: learn.wwl.protect-identities-azure-acative-directory
 metadata:
-  title: MD-102 1-Protect identities in Active Directory Domain Services
+  title: MD-102 1-Protect identities in Azure Active Directory
   description: "This module introduces students to the various authentication methods used to protect identities."
-  ms.date: 03/30/2023
+  ms.date: 04/25/2023
   author: wwlpublish
   ms.author: rstearman
   ms.topic: interactive-tutorial
   ms.prod: learning-azure
-title: Protect identities in Active Directory Domain Services
+title: Protect identities in Azure Active Directory
 summary: This module introduces students to the various authentication methods used to protect identities.
 abstract: |
   After this module, you should be able to:

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,5 @@`
`1`	`1`
	`2`	`+`
`2`	`3`	As the number of different sets of credentials that one should manage increases, password security becomes weaker and weaker. Users often use the same or similar passwords for their private email accounts, social networks, and business accounts. This results in a scenario, where a security breach of any user’s digital identity can jeopardize all other identities. Because of this, it’s recommended that you use more authentication methods when authenticating against business resources and alternative methods for authentication. In addition, you should use technologies that can monitor user identities and user account behavior and proactively work to protect and prevent attacks.
`3`	`4`
`4`	`5`	`#### Objectives`