question

DhruvilShah-9938 avatar image
0 Votes"
DhruvilShah-9938 asked JamesHamil-MSFT commented

Can someone please explain this alert to me?

130770-image.png




What does password hash sync mean?

azure-security-center
image.png (42.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JamesHamil-MSFT avatar image
0 Votes"
JamesHamil-MSFT answered JamesHamil-MSFT commented

Hi @DhruvilShah-9938 , from this document: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs

Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash, of the hash, of a user's password from an on-premises Active Directory instance to a cloud-based Azure AD instance.

Password hash synchronization is an extension to the directory synchronization feature implemented by Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Microsoft 365. You sign in to the service by using the same password you use to sign in to your on-premises Active Directory instance.

What questions do you have about it? I'd be happy to answer any you may have!

Best,
James


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks James! I understand that part. We had some unusual activities on a user account. Why does it say "failed" under multi-factor authentication. Does that mean the attacker had the right password? or does that mean a wrong password was used. I'm just trying to understand the sequence on what happened to that user account. In able to trigger MFA wouldn't you need a right password first? Thanks for your quick response.

0 Votes 0 ·

Hi @DhruvilShah-9938 , sorry for the delay in response! Have you seen this document? You can download the logs and see exactly what failed. If no info comes up on the download please let me know.

Best,
James


0 Votes 0 ·