SMB interception defenses
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit f9515e8 · +2 −2 lines · also on GitHub
⋯ 281 unchanged lines
282282
1. **Enforce long passwords and phrases** - We encourage using longer password lengths such as 15
283283
characters or more to reduce your resistance to brute force attacks. You should also avoid common
284284
words or phrases to make your password even stronger.
285
−1. **Deploy Azure AD Password Protection for Active Directory Domain Services** - Use Azure AD
285
+1. **Deploy Microsoft Entra Password Protection for Active Directory Domain Services** - Use Microsoft Entra ID
286286
Password Protect to block known weak passwords and terms that are specific to your organization.
287287
To learn more, review
288
− [Enforce on-premises Azure AD Password Protection for Active Directory Domain Services](/azure/active-directory/authentication/concept-password-ban-bad-on-premises).
288
+ [Enforce on-premises Microsoft Entra Password Protection for Active Directory Domain Services](/azure/active-directory/authentication/concept-password-ban-bad-on-premises).
289289
1. **Use group Managed Service Accounts (gMSA)** - gMSA enabled services with their 127 random
290290
character construction, makes brute force and dictionary attacks to crack passwords incredibly
291291
time consuming. Read about what gMSAs are in the article
⋯ 30 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 09:45 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.