[OPLINTECH] Office365 Hacking Attempts

[Chad Neeper]

I've set up simple Office 365 configurations at a few of my libraries, but
to be honest, you two are probably still more familiar with it than I am.
It seems Microsoft isn't particularly interested in increasing password
complexity requirements, but can you perhaps instead enable (and enforce)
MFA (multi-factor authentication) in your Office 365 configurations? It
might be more inconvenient for your users, but strong security and easy
rarely go hand in hand...

Just a thought.

Chad

______________________________
*Chad Neeper*
Senior Systems Engineer

*Level 9 Networks*
740-548-8070 (voice)
866-214-6607 (fax)

*Full IT/Computer consulting services -- Specialized in libraries and
schools*


On Wed, Apr 10, 2019 at 4:30 PM Joshua Ashworth via OPLINTECH <
oplintech at lists.oplin.org> wrote:

> Hi Orion,
>
>
>
> We have had similar experiences and would welcome any potential solutions.
>
>
>
> Thanks,
>
> Josh
>
>
>
>
>
>
>
>
>
> *JOSHUA ASHWORTH*
>
> Information Technology Director
>
> DaytonMetroLibrary.org <http://www.daytonmetrolibrary.org/>
>
> P: 937.496.8503
>
> ………………………………………………………………
>
>
>
> *“Bis vivit qui bene vivit.”*
>
>
>
>
>
>
>
> *From:* OPLINTECH [mailto:oplintech-bounces at lists.oplin.org] *On Behalf
> Of *Trist, Orion via OPLINTECH
> *Sent:* Tuesday, April 09, 2019 3:29 PM
> *To:* OPLINTECH at lists.oplin.org
> *Subject:* [OPLINTECH] Office365 Hacking Attempts
>
>
>
> Hi All,
>
>
>
> I’m wondering what other libraries have done about hacking attempts in
> Office 365?
>
>
>
> We’ve started to get account lockouts or even hacked accounts from places
> like China and Russia. Not a tone, but enough to be annoying. From what
> I’ve gathered from Microsoft, they do have a way to blacklist countries
> from even attempting to connect to your tenant. But apparently, it’s a
> feature that costs money, it supposedly requires Azure Premium at $6 per
> user per month. You can then setup a Conditional Access policy called Named
> Location to restrict access from whatever country you want. Or you can pay
> for E5 accounts, which are even more expensive.
>
>
>
> I’d love to hear if anyone else has encountered this issue and if you’ve
> found a viable solution.
>
>
>
> Thanks!
>
>
>
> Orion Trist
>
> System Administrator
>
> Public Library of Cincinnati & Hamilton County
>
> Desk: 513-369-3191
>
> e-mail: orion.trist at cincinnatilibrary.org
>
>
> _______________________________________________
> OPLINTECH mailing list
> OPLINTECH at lists.oplin.org
> http://lists.oplin.org/mailman/listinfo/oplintech
>
> *** OPLIN now offers a Tier III-rated data center for libraries to use.
> Find out more:    https://www.oplin.ohio.gov/co-location-service ***
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20190410/86646384/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 9777 bytes
Desc: not available
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20190410/86646384/attachment-0001.png>