✨ Microsoft Entra ID Reintroduces WhatsApp for MFA OTP Delivery ✨

 

In late 2023, Microsoft Entra began leveraging WhatsApp as an alternate channel to deliver multifactor authentication (MFA) one-time passcodes (OTPs) to users in India and Indonesia. This initiative saw improved deliverability, completion rates, and user satisfaction in both countries. Although the channel was temporarily disabled in India in early 2024, Microsoft is set to re-enable it in December 2024 and expand its use to additional countries.

When Will This Happen?

Starting in December 2024, users in India and other countries may begin receiving MFA text messages via WhatsApp. This feature will be available to users who are enabled to receive MFA text messages as an authentication method and already have WhatsApp installed on their phones. If a user with WhatsApp is unreachable or lacks internet connectivity, the system will quickly fall back to the regular SMS channel. Additionally, users receiving OTPs via WhatsApp for the first time will be notified of the change in behavior via SMS text message.

How Will This Affect Your Organization?

If you are a Microsoft Entra workforce customer currently using text-message authentication, it is recommended to notify your helpdesk about this upcoming change. The sender agent in WhatsApp will be branded as Microsoft with a verified checkmark, ensuring users recognize the legitimacy of the messages.

Organizations that prefer not to use WhatsApp for MFA text messages can disable this authentication method. However, Microsoft highly encourages moving to more modern, secure methods like Microsoft Authenticator and passkeys.

Key Highlights

• WhatsApp Delivery: Users with WhatsApp will receive MFA OTPs directly in the app, with SMS as a fallback if needed.
• Verified Sender: Messages will come from Microsoft with a verified checkmark.
• Enhanced User Experience: Improved deliverability and user satisfaction based on prior implementations in India and Indonesia.

Recommendations

• Inform Your Helpdesk: If you currently use text-message authentication, inform your helpdesk about this change.
• Consider More Secure Methods: Microsoft recommends adopting more secure authentication mechanisms, such as Microsoft Authenticator and passkeys.

What You Need to Do to Prepare

This rollout will happen automatically with no admin action required. You may want to notify your users about this change and update any relevant documentation as appropriate.

Keep Exploring. Happy Learning! 😊

Read More

⚠️ Microsoft is Deprecating Windows Server Update Services (WSUS) ⚠️

 

On September 20, 2024, Microsoft officially announced the deprecation of Windows Server Update Services (WSUS). This move is part of Microsoft's strategy to modernize Windows management with cloud-based solutions. Specifically, this means that Microsoft is no longer investing in new capabilities, nor accepting new feature requests for WSUS. However, current functionality will be preserved, and updates will continue to be published through the WSUS channel. Microsoft will also support any content already published through the WSUS channel. Here’s a detailed look at what this means and how you can prepare for the transition.

What is WSUS?

WSUS has been a vital tool for IT administrators, enabling them to manage the distribution of updates released through Microsoft Update to computers in a corporate environment. It provides control over updates, allowing administrators to approve or decline updates, select target computers, and generate detailed reports. Introduced in 2005 as Software Update Services (SUS), WSUS has been essential for managing and distributing updates across large corporate networks, ensuring secure and controlled updates for numerous Windows devices.

Why is WSUS Being Deprecated?

Microsoft is shifting towards cloud-based solutions to enhance update management. While WSUS will no longer receive new features, it will continue to function for existing updates. This move aligns with Microsoft’s vision for simplified, cloud-centric management tools. 

Deprecation refers to the stage in the product lifecycle when a feature or functionality is no longer in active development and may be removed in future releases. Each release of Windows Server adds new features and functionality; occasionally, features and functionality are removed, typically because a better option has been added. Deprecated features continue to work and are fully supported until they are officially removed. Microsoft has no current plans to remove WSUS from in-market versions of Windows Server, including Windows Server 2025.

Impact

The deprecation of WSUS will take effect with the release of Windows Server 2025. With this release, WSUS will not be actively developed or enhanced. Additionally, Microsoft plans to phase out the drive synchronization feature in WSUS on April 18, 2025. Organizations relying on WSUS should start planning their transition to alternative solutions.

Transitioning to Cloud-Based Tools

Microsoft suggests transitioning to the following cloud-based tools:

• Windows Autopatch: Automates updates for Windows clients and Microsoft 365 apps.
• Microsoft Intune: Offers comprehensive endpoint management, including update management.
• Azure Update Manager: Provides robust features for server update management.

These tools offer improved security, efficiency, and integration with other Microsoft services, making them suitable replacements for WSUS.

Conclusion

The deprecation of WSUS marks a significant shift towards cloud-based update management solutions. By transitioning to tools like Windows Autopatch, Microsoft Intune, and Azure Update Manager, organizations can benefit from improved security, efficiency, and integration with other Microsoft services. Start planning your transition today to ensure a smooth and seamless update management experience.

Keep Exploring. Happy Learning! 😊

Read More