Saturday, 11 October 2025

author: MicrosoftGuyJFlo

author: omondiatieno

|Method|Description|URL|

>

A Microsoft Entra documentation page was updated: 21822.

| Check | Minimum required license |

A Microsoft Entra documentation page was updated: Zero Trust Protect Identities.

A Microsoft Entra documentation page was updated: Zero Trust Protect Engineering Systems.

A Microsoft Entra documentation page was updated: Zero Trust Protect Tenants.

Without Local Admin Password Solution (LAPS) deployed, threat actors exploit static local administrator passwords to establish initial access. After threat actors compromise a single device with a shared local administrator credential, they can move laterally across the environment and authenticate to other systems sharing the same password. Compromised local administrator access gives threat actors system-level privileges, letting them disable security controls, install persistent backdoors, exfiltrate sensitive data, and establish command and control channels.

author: MicrosoftGuyJFlo

9. There are two possible approaches to set the OU:

A Microsoft Entra documentation page was updated: sfipillar: Protect tenants and isolate production systems.

**Remediation action**