Soluții

Azure AD vs Entra ID: what’s changed in 2025 for Small Businesses?

Microsoft Entra is now an umbrella identity platform that includes:

  • Entra ID (formerly Azure AD)

  • Entra Permissions Management

  • Entra Verified ID

  • Entra ID Governance (enterprise-level)

For most SMBs, Entra ID is the primary concern — the backbone of user authentication for Microsoft 365, Teams, Intune, and even third-party apps.

 Free vs Paid Plans: 2025 Breakdown

Feature Free Entra ID P1 Entra ID P2
Single Sign-On (SSO) ✅ ✅ ✅
User/Group Management ✅ ✅ ✅
Security Defaults (MFA on all users) ✅ ✅ ✅
Conditional Access Policies ❌ ✅ ✅
Self-Service Password Reset (SSPR) ✅ (for cloud-only) ✅ ✅
Hybrid Join (on-prem AD) ❌ ✅ ✅
Identity Protection (risk-based MFA) ❌ ❌ ✅
Privileged Identity Management (PIM) ❌ ❌ ✅
Access Reviews ❌ ❌ ✅
Pricing (2025 est.) Free ~6 USD/user/month ~9 USD/user/month

The Free plan is still surprisingly useful for small teams using Microsoft 365:

  • Cloud-based user accounts

  • Basic MFA via Security Defaults

  • Integration with up to 10 third-party SSO apps

  • Admin portal with user logs

However, it lacks Conditional Access, so you can’t enforce more granular policies like:

“Block access unless user is in Romania and on a compliant device.”

Entra ID P1 is often the sweet spot for SMBs in 2025. It unlocks:

  • Conditional Access policies (location, device, risk)

  • Hybrid AD Join (sync on-prem Active Directory)

  • Self-service group management

  • Intune + Entra integration for device compliance

 Example use case: An SMB wants to allow Teams logins only from managed mobile devices — P1 is required.

This tier is usually overkill for SMBs, unless:

  • You manage multiple administrators and need PIM (just-in-time access)

  • You require Identity Protection to detect risky sign-ins and automate blocking

  • You need Access Reviews for compliance (ISO 27001, HIPAA)

It’s most useful for MSPs or SMBs working in finance, healthcare, or government sectors.

Licensing Notes (April 2025)

  • Microsoft 365 Business Premium now includes Entra ID P1

  • Microsoft is testing per-group conditional access licensing, expected late 2025

  • A new SMB-specific bundle (with Defender for Endpoint and Intune) is in preview.

[mai mult...]

Windows 11 24H1: what IT Admins need to know

24H1 is the first half-yearly feature update of 2025, building on the previous 23H2 release with enhancements focused on:

  • AI-powered workflows

  • Security hardening

  • User experience refinements

  • Integration with Microsoft 365 and Entra ID (formerly Azure AD)

This update is available to both Home and Pro editions, but enterprise environments using Windows 11 Enterprise and Education should expect additional features via their servicing channels.

1. New Group Policies

Microsoft has introduced and deprecated several GPO settings:

New:

  • EnableCopilotChat – Allows or blocks AI assistant Copilot per user/device

  • ForceWindowsUpdatesAIRecommendations – Enable AI-powered update suggestions

  • HideMicrosoftAccountRequirement – (for Pro) optional control over OOBE flow

 Deprecated:

  • DoNotShowWelcomeExperience is now replaced with a new onboarding flow

  • Older Edge GPOs for legacy InPrivate restrictions

 Tip: Use the latest Administrative Templates (ADMX) to reflect these changes in your GPMC.

2. Changes to Out-of-Box Experience (OOBE)

Microsoft continues its push toward cloud-based accounts and AI onboarding.
The default OOBE flow now requires an internet connection and pushes for Microsoft accounts — even on Windows 11 Pro.

Workaround: Use tools like Rufus to pre-modify the ISO or use unattend XML scripts with local account presets for enterprise imaging.

3. File Explorer & Taskbar Behavior

  • New File Explorer with tab grouping and context-aware previews

  • Taskbar now integrates Copilot by default, unless disabled via GPO

  • Recent bug reports indicate slow navigation on systems with mapped network drives — a known issue being patched in KB5037543

4. New Security Defaults

  • Smart App Control is now enabled by default on clean installs

  • Support for Pluton Security Processor (on new laptops)

  • Improved credential isolation via LSA Protection auto-enabled

Be prepared to adjust hardening policies in organizations using legacy apps or unsigned drivers.

Compatibility Notes

Many legacy tools and monitoring agents might not behave well with new AI APIs and Copilot overlays. Common issues have been reported with:

  • Older endpoint security tools

  • Custom automation scripts that rely on deprecated Shell hooks

  • RDP clients using TLS 1.0 (which is now blocked)

Recommendation: Run a pilot deployment on non-critical endpoints before full rollout.

Deployment & Update Best Practices

  • WSUS/SCCM: 24H1 is available as Feature Update via WSUS

  • Intune: Compatible with Intune version 2403+. Enables AI settings at deployment

  • Media Creation Tool: Use only for non-domain endpoints or manual testing.

[mai mult...]

How to Install Windows 11 without a Microsoft Account using Rufus

With the latest versions of Windows 11, Microsoft is pushing harder than ever to require a Microsoft account during installation—especially on Home and Pro editions. For users who prefer a local account, this can be frustrating.

Rufus is a free and lightweight utility for creating bootable USB drives. As of recent updates, Rufus allows you to modify Windows installation media to skip several annoying setup requirements, including:

  • The need to sign in with a Microsoft account

  • TPM 2.0 and Secure Boot checks

  • The 4GB RAM minimum

1. Download the Latest Version of Rufus

Go to the official Rufus website: https://rufus.ie
Download either the portable version or the installer

2. Download the Official Windows 11 ISO

You can get the official ISO directly from Microsoft:

Save the file locally.

3. Plug in a USB Drive

Insert a USB stick with at least 8GB of storage. Make sure to back up any data on it, as it will be erased.

4. Open Rufus and Select the ISO

  1. Launch Rufus

  2. Under Device, select your USB drive

  3. Click SELECT and choose the Windows 11 ISO file

  4. Rufus will analyze the ISO and detect that it’s a Windows image.

5. Customize the Installation (The Magic Step)

Once you select the ISO, Rufus will prompt you with a new window titled:

“Windows User Experience”

Here, you can check the following boxes:

✅ Remove requirement for an online Microsoft account
✅ Remove requirement for TPM 2.0
✅ Remove requirement for Secure Boot
✅ Remove requirement for 4GB+ RAM and 64GB+ disk

You can choose all or just the account-related ones, depending on your needs.

Click OK to continue.

6. Start the Installation Process

Once you’ve configured the options, click START in Rufus.
It will:

  • Format your USB drive

  • Copy the modified Windows files

  • Make the USB bootable.

[mai mult...]