![]() ![]() Once again it times out on MS side when trying to finish the process.Īt this point the VP has been unable to get into his email and needed to be around & bugged by IT for a good chunk of today to get his thumbprint to unlock etc his phone. I thought, "well, since it wasn't actually 'me' that installed and setup the MS Authenticator app on the VP's phone, I removed the account that was setup earlier on it and and recreated it from scratch following the Office prompts and scanning the QR code again to create the account under MS Authenticator again. I checked and connection to the internet was good, and other apps running without issue. I now see the little spinning icon signifying its completing the 2fa activation just keeps spinning and spinning, until eventually it gives a timeout error. Since we already have MS Authenticator app on the guy's phone and the o365 user account already setup in it from the previous times through the setup screens earlier today, I click next through those steps until the end. I come over and see that, each time you try load up outlook on the VP's tablet, it prompts again that our org requires more info and goes through the 2fa setup screens again. My desktop guy then runs into issues getting the VP going. That installs fine and we scan the QR Code and it created an account on his phone under his O365 name and I'm thinking we're good to go as have been in the past. so we went with MS Authenticator versus Google Authenticator)We go through the process of installing the MS App on the guy's phone (Google Pixel phone). (The VP does not want to have to type in a several digit code each time. Office/Outlook then prompted with the expected prompts to choose which type of 2fa we wanted to use. We bring up outlook on his laptop in his office. We changed his O365 password, kicked off any currently logged in o365 connections for the user, turned on MFA for his account and disabled the mailflow rule preventing emailing to external email addresses. ![]() I wasn't able to contact him right away, so I initially put in a transport/mailflow-rule to block all emails being sent to addresses outside the company. ![]() To make matters worse, this user is one of the VPs of the company. I checked yesterday and his account was being logged into recently from multiple countries. Very recently (past few days), we had a user suddenly sending 10,000+ (spam) emails from his O365 email account. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |