Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

When signing into Office 365's admin portal for the first time, "Set passwords to never expire" is actually the first and only wizard-type suggestion that's presented as a best practice to get out of the way.

It's a nice reminder and the option is already pre-selected so you just have to click Save. I've gotten into the habit of doing this now even before configuring domains, users, etc.

The next logical step of course is to enable/enforce MFA for all users as a thorough auth policy.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: