Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
159 questions
Identity Protection
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 96%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVV%3C/text%3E%3C/svg%3E)
Venkata V.reddy
25
Reputation points
Hi All,
we have a user risk policy in identity protection, and the controls for that policy state that any users with high risk will need to change their password. However, even if any user has a high risk, it's not prompting them to change their password. Any idea what might be the issue here?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 28.000000000000004%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECK%3C/text%3E%3C/svg%3E)
Catherine Kyalo 650 Reputation points Microsoft Employee2024-01-30T07:36:24.95+00:00 There are several reasons why the policy controls may not be working as expected. Here are some things to check:
- Verify that the policy is correctly configured and assigned to the appropriate users. You can do this in the Azure Portal by navigating to Azure AD Identity Protection > User risk policies.
- Check the activity logs to see if the policy controls are being triggered. You can do this in the Azure Portal by navigating to Azure AD Identity Protection > Risky users > [User] > Activity.
- Verify that the users in question have the appropriate license for Azure AD Identity Protection. Users must have an Azure AD Premium P2 or Enterprise Mobility + Security E5 license to use Identity Protection.
- Check if the password reset action is blocked by any Conditional Access policies that may be in place.
Sign in to comment