Only Half of Ransomware Victims Who Pay Ransoms Recover Their Data, Finds ‘2018 Cyberthreat Defense Report’

The content below is taken from the original ( Only Half of Ransomware Victims Who Pay Ransoms Recover Their Data, Finds ‘2018 Cyberthreat Defense Report’), to continue reading please visit the site. Remember to respect the Author & Copyright.

CyberEdge Group, a premier research and marketing firm serving the security industry’s top vendors, today announced immediate availability of its… Read more at VMblog.com.

Alexa can now play that song you heard but can’t remember the name of

The content below is taken from the original ( Alexa can now play that song you heard but can’t remember the name of), to continue reading please visit the site. Remember to respect the Author & Copyright.

Sometimes you want to listen to a certain song but you can't quite remember what it's called. Other times you might just want to listen to some of your favorites that you haven't heard in a while. Now, Alexa can find those tunes for you. While listen…

Apple will stop accepting iTunes LP submissions this month

The content below is taken from the original ( Apple will stop accepting iTunes LP submissions this month), to continue reading please visit the site. Remember to respect the Author & Copyright.

Back in 2009, iTunes 9 offered a way for artists and labels to pack in extra album material like art, videos and bonus tracks. Earlier on Tuesday morning, Metro found a leaked Apple document that spelled doom for the bundled extras. The Verge later c…

Just-in-Time VM Access is generally available

The content below is taken from the original ( Just-in-Time VM Access is generally available), to continue reading please visit the site. Remember to respect the Author & Copyright.

Azure Security Center provides several threat prevention mechanisms to help you reduce surface areas susceptible to attack. One of those mechanisms is Just-in-Time (JIT) VM Access. Today we are excited to announce the general availability of Just-in-Time VM Access, which reduces your exposure to network volumetric attacks by enabling you to deny persistent access while providing controlled access to VMs when needed.

When you enable JIT for your VMs, you can create a policy that determines the ports to be protected, how long ports remain open, and approved IP addresses from where these ports can be accessed. The policy helps you stay in control of what users can do when they request access. Requests are logged in the Azure Activity Log, so you can easily monitor and audit access. The policy will also help you quickly identify existing virtual machines that have JIT enabled and virtual machines where JIT is recommended.

This feature is available in the standard pricing tier of Security Center, and you can try Security Center for free for the first 60 days.

To learn more about these features in Security Center, visit our public preview blog and documentation

UK kicks off driverless car law review to get tech on the road by 2021

The content below is taken from the original ( UK kicks off driverless car law review to get tech on the road by 2021), to continue reading please visit the site. Remember to respect the Author & Copyright.

 In 2021 the UK government intends the country to be well on its way to a driverless future. No, not a cheap joke about Brexit — yesterday it announced a three-year regulatory review to “pave the way for self-driving cars”. Read More

British military spends more on computers than weapons and ammo

The content below is taken from the original ( British military spends more on computers than weapons and ammo), to continue reading please visit the site. Remember to respect the Author & Copyright.

Shows where wars of the 21st century will really be fought…

The Ministry of Defence has admitted that it spends more on computer services than it does on weapons and ammunition for the Armed Forces.…

Use Smart Devices in Your Dumb Shower With This Curtain

The content below is taken from the original ( Use Smart Devices in Your Dumb Shower With This Curtain), to continue reading please visit the site. Remember to respect the Author & Copyright.

There’s just something about being in a shower. Some folks use showers to take advantage of forgiving acoustics. Some folks use showers to have brilliant revelations they just can’t seem to have anywhere […]

The post Use Smart Devices in Your Dumb Shower With This Curtain appeared first on Geek.com.

Picard 2.0 beta announcement

The content below is taken from the original ( Picard 2.0 beta announcement), to continue reading please visit the site. Remember to respect the Author & Copyright.

Hello people,

We saw a flurry of updates to Picard these last few months and I am happy to announce that Picard 2.0 is finally in beta. You can find it here – Picard 2.0.0beta1

If you have been following our Picard related blogs, you will know that we switched up our dependencies a bit. What this means is that Picard should look better and in general feel more responsive.

We also decided to release a new stable version of Picard before the beginning of the summer.

To help us, advanced users, translators and developers are encouraged to:

A simplified list of changes made since 1.4 can be read here.

Be aware that downgrading from 2.0 to 1.4 may lead to configuration compatibility issues – ensure that you have saved your Picard configuration before using 2.0 if you intend to go back to 1.4.

 

 

Customising a $30 IP Camera For Fun

The content below is taken from the original ( Customising a $30 IP Camera For Fun), to continue reading please visit the site. Remember to respect the Author & Copyright.

WiFi cameras like many other devices these days come equipped with some sort of Linux subsystem. This makes the life of a tinkerer easier and you know what that means. [Tomas C] saw an opportunity to mod his Xiaomi Dafang IP camera which comes configured to work only with proprietary apps and cloud.

The hack involves voiding the warranty by taking the unit apart and installing custom firmware onto it. Photos posted by [Tomas C] show the mainboard powered by an Ingenic T20 which is a popular IP Camera processor featuring some image and video processing sub-cores. Upon successful flashing of the firmware, the IP camera is now capable of a multitude of things such as remote recording and playback which can be configured using the web UI as documented by [Tomas C]

We did a little more digging on the custom firmware and discovered that the original author of the custom firmware, [EliasKotlyar] has done a lot of work on this project. There are loads of images of the teardown of a camera and an excellent set of documentation of how he made the hack. Everything from adding serial headers, getting root access, dumping the firmware and even toolchain links are given on the page. This is extremely handy for a newbie looking to get into the game.

And IP Cameras are not of the only hackable hardware out in the wild. There are other devices that are running Linux based firmware such as the Wifi SD Cards that run OpenWRT. Check out the essential guide to compiling OpenWRT from source if you are looking to get started with your next IP Camera hack.

Thanks for the tip [Orlin82]

Black Mirror is Coming Back, Because the Future Still Sucks

The content below is taken from the original ( Black Mirror is Coming Back, Because the Future Still Sucks), to continue reading please visit the site. Remember to respect the Author & Copyright.

Black Mirror season four dropped not that long ago and honestly we’re still recovering from the hangover of tech-powered existential nightmares. Granted, this was the most optimistic season yet. But for a dystopian […]

The post Black Mirror is Coming Back, Because the Future Still Sucks appeared first on Geek.com.

MDB Viewer Plus: View and Edit Microsoft Access Database Files

The content below is taken from the original ( MDB Viewer Plus: View and Edit Microsoft Access Database Files), to continue reading please visit the site. Remember to respect the Author & Copyright.

Microsoft Database or MDB files are one of the oldest database systems that came into existence with Microsoft Access. MDB files were replaced with similar ACCDB files. These database files can be easily opened, edited and queried using Microsoft Access. […]

This post MDB Viewer Plus: View and Edit Microsoft Access Database Files is from TheWindowsClub.com.

How a Free Version of Teams Might Work

The content below is taken from the original ( How a Free Version of Teams Might Work), to continue reading please visit the site. Remember to respect the Author & Copyright.

Teams Splash

Teams Splash

Teams Takes On Slack

Brad’s scoop about Microsoft preparing a free version of Teams to take on Slack got me thinking about the technical shape of such a product and how it might differ from the enterprise version available to Office 365 tenants.

As Brad explains in his article, Microsoft is aiming at the free version of Slack. I assume that the idea is to block the route companies take from using the limited free version to buying the full paid edition of Slack. Since the introduction of Teams in November 2016, Microsoft has competed head-to-head with Slack, but has lacked an introductory version. Anyone who wants Teams must have an Office 365 tenant and license every user.

Open to All

Microsoft’s announcement last week that they Teams now supports external access from any account is really important to their ability to deliver a free Teams client.

The free version won’t depend on Azure Active Directory as the authoritative directory or Office 365 Groups to manage team membership. Instead, I could see a scenario where someone with an MSA (Microsoft) account (connected to any email address) signs up to create a team and then nominates other members, each of which is identified by an email address. Teams sends invitations to those addresses and when the addresses are redeemed, connects the addresses to the team. Behind the scenes, the collection of members might be represented by a group in the MSA directory.

Limited Functionality for Free Teams

Microsoft is likely to limit functionality available to the free version of Teams. For instance, instead of supporting 100 channels in a team, the free version might support five. Instead of being able to create 250 teams, an MSA account might be limited to ten, and so on. I also think it likely that the array of bots, tabs, apps, and connectors available in the Office 365 version will be trimmed for a free version. However, Microsoft might keep apps that appeal to programmers, such as the integration between Visual Studio Team Services and Teams.

Consumer Versions of Apps Step Up

Teams draws upon many other Office 365 apps to deliver functionality to users. I could see that a free team might replace the enterprise apps with consumer versions. For instance, the free version of Teams could use an Outlook.com mailbox to host a calendar and a OneDrive site to share files between team members. Outlook.com uses the same physical infrastructure as Exchange Online, so hosting a mailbox on Outlook.com is a quick switch. Some more work is needed to replace SharePoint Online as the basis for file sharing and collaboration, but you could see how the consumer version of OneDrive could be used.

Conversations and Calls

Apart from that, the core Teams services that handle personal and channel conversations and the media (graphics) posted in conversations run on Azure and probably do not need a heap of work to handle the demands of a free version. Indeed, some of the complexity of the enterprise will be removed, as free versions will not be concerned about things like compliance and data governance.

As to meetings, the Office 365 version of Teams uses the consumer Skype infrastructure for its phone and calling functionality, so it’s not a long shot to say that a free version of Teams would do the same thing, dropping enterprise functionality like calling plans and PSTN dial-in. Those who create free Teams might have to sign up to a Skype consumer subscription to pay for calls, if those calls go outside the boundary of the team.

Switching Over

If they introduce a free version of Teams, Microsoft will have to be able to upgrade from freeware to paid-for. The steps involved might be:

  • Create a new Office 365 tenant.
  • Create new Azure AD accounts for the MSA accounts used by the free version of Teams.
  • Assign Office 365 licenses to the Azure AD accounts. Microsoft might have special low-priced plans to help ease the switchover.
  • Switch the free Teams to enterprise versions based on Office 365 Groups and SharePoint Online.

Conceptually, moving from free to paid does not seem to pose major technical difficulties. Microsoft has access to all the data, so this should be a straightforward operation. Of course, the devil is in the detail.

Sponsored

The Free Version of Teams Might Just Happen

The bottom line is that the architecture of Teams lends itself to morphing from the version we see in Office 365 to a free version that competes directly with the free version of Slack. Stranger things have happened, so don’t be surprised if it does.

Follow Tony on Twitter @12Knocksinna.

Want to know more about how to manage Office 365? Find what you need to know in “Office 365 for IT Pros”, the most comprehensive eBook covering all aspects of Office 365. Available in PDF and EPUB formats (suitable for iBooks) or for Amazon Kindle.

The post How a Free Version of Teams Might Work appeared first on Petri.

Mercedes’ futuristic headlights are no longer just a concept

The content below is taken from the original ( Mercedes’ futuristic headlights are no longer just a concept), to continue reading please visit the site. Remember to respect the Author & Copyright.

Mercedes has been testing smarter headlights, and now it appears they’re no longer just a concept. Daimler announced today that these futuristic headlamps will be available in top of the line Mercedes-Maybach S-Class vehicles.

Shape is an app to help you learn how to invest the ethical way

The content below is taken from the original ( Shape is an app to help you learn how to invest the ethical way), to continue reading please visit the site. Remember to respect the Author & Copyright.

 Recently launched out of beta, U.K. startup Shape wants to create a more educational trading experience for a new generation of traders, including those who might be concerned with the ethical standards of the sectors or companies they back. Read More

Knock, knock. Whois there? Get ready for anonymized email addresses after domain privacy shake-up

The content below is taken from the original ( Knock, knock. Whois there? Get ready for anonymized email addresses after domain privacy shake-up), to continue reading please visit the site. Remember to respect the Author & Copyright.

Looming GDPR Euro law sends ICANN back to drawing board

You may will no longer be able to see the name, email or house address for whoever owns a specific domain name under new rules proposed by DNS overseer ICANN.…

Caped Beagle is FPGA Superhero

The content below is taken from the original ( Caped Beagle is FPGA Superhero), to continue reading please visit the site. Remember to respect the Author & Copyright.

We miss the days when everything had daughterboards. Now, Arduinos have shields and Raspberry Pis have hats. The BeagleBone has capes. Whatever. However, regardless of the name, the open source BeagleWire cape/shield/hat/daughterboard connects to a BeagleBone and provides a Lattice iCE40HX FPGA, some support hardware, and common I/O connectors like Pmod and Grove. You can see a video about the board below.

In addition to the FPGA, the board contains a EEPROM, RAM, flash memory, an oscillator, and a few buttons, switches and LEDs. The buttons even feature hardware debouncing. The parts list and design files are all available and — depending on a successful crowdfunding campaign — you might be able to buy one for $75 in the future.

The board is configured to communicate over the 100 MHz 16-bit GPMC port. Linux software and example drivers are available so it should be fairly simple to get the FPGA and CPU talking to each other for your own purposes.

If you decide to build your own, there’s a one-click button that will populate a DigiKey cart for you with most of the components. Although the DigiKey site complained about an error, it did seem to order 24 of the 26 components and the total came to just over $50. Of course, you’d still need to source the missing parts and the board.

We’ve talked about the Lattice iCE FPGAs quite a bit in the past. Not only do you have our tutorial videos, but there are plenty of others, too.

Thanks for [Drew Fustini] for pointing this out to us.

DIY Text-to-Speech with Raspberry Pi

The content below is taken from the original ( DIY Text-to-Speech with Raspberry Pi), to continue reading please visit the site. Remember to respect the Author & Copyright.

We can almost count on our eyesight to fail with age, maybe even past the point of correction. It’s a pretty big flaw if you ask us. So, how can a person with aging eyes hope to continue reading the printed word?

There are plenty of commercial document readers available that convert text to speech, but they’re expensive. Most require a smart phone and/or an internet connection. That might not be as big of an issue for future generations of failing eyes, but we’re not there yet. In the meantime, we have small, cheap computers and plenty of open source software to turn them into document readers.

[rgrokett] built a RaspPi text reader to help an aging parent maintain their independence. In the process, he made a good soup-to-nuts guide to building one. It couldn’t be easier to use—just place the document under the camera and push the button. A Python script makes the Pi take a picture of the text. Then it uses Tesseract OCR to convert the image to plain text, and runs the text through a speech synthesis engine which reads it aloud. The reader is on as long as it’s plugged in, so it’s ready to work at the push of a button. We can probably all appreciate such a low-hassle design. Be sure to check out the demo after the break.

If you wanted to use this to read books, you’d still have to turn the pages yourself. Here’s a BrickPi reader that solves that one.

Cambridge to use XRP for Faster Global Payments

The content below is taken from the original ( Cambridge to use XRP for Faster Global Payments), to continue reading please visit the site. Remember to respect the Author & Copyright.

Cambridge Global Payments — a subsidiary of FLEETCOR Technologies and a leading global provider of commercial payment solutions — is launching a pilot program to use XRP in cross-border payment flows through xRapid.

Cambridge currently has over 13,000 clients around the world and handles $20 billion in international transactions annually. Incorporating XRP in those flows will provide their clients with a cross-border payments experience that is significantly faster, cheaper and more transparent.

Cambridge joins five major financial institutions who have publicly announced that they are piloting xRapid, including Cuallix, MoneyGram, IDT Corporation, Mercury FX and Western Union.

They are also exploring xCurrent, Ripple’s enterprise software for messaging and international transaction settlement currently used by over 100 financial institutions.

Cambridge looks to use xRapid to improve their customer experience

Cambridge works with businesses, large and small, to facilitate critical and secure payments for fuel, toll, lodging, and general payables through its own proprietary payment networks in North America, Latin America, Europe and Australasia.

These international payment flows allow for a streamlined experience for customers who depend on Cambridge to ensure their businesses stay healthy and expand. With xRapid, Cambridge aims to provide an even better experience for those customers.

Mark Frey, chief operating officer for Cambridge Global Payments, is confident that blockchain powered solutions like xRapid can not only help Cambridge improve their customers’ payments journey, but also spur critical innovation in their industry.

“We are excited for the insights this pilot program is expected to deliver, and we will use that information to help both Cambridge and FLEETCOR develop our use cases for blockchain in international payments,” said Frey.

“We strive to deliver best-in-class cross-border payments services, with speed and transparency. We look forward to exploring how Ripple can help us continue to improve the customer experience using new technology.”

Continued adoption of digital assets will revolutionize cross-border payments

As Cambridge and more financial institutions begin to use xRapid to source liquidity, capital locked up around the world required in today’s fractured system for international payments can become available and put to use in new ways.

Ripple’s director of business development, Danny Aranda, believes that partners like Cambridge recognize the revolutionary potential using XRP has for financial institutions.

“We’re focused on working with partners like Cambridge that understand the benefits of digital assets and are serious about using XRP to overcome the inefficiencies in the global payment system,” said Aranda. “We look forward to collaborating with Cambridge during this pilot to enhance the speed and transparency of cross-border payments for their clients.”

The efficiency of cheaper and on-demand international payments using digital assets like XRP together with the release of dormant capital, is an important step forward toward Ripple’s mission of establishing an Internet of Value, where money can move like information.

To learn more, please visit our solutions page.

The post Cambridge to use XRP for Faster Global Payments appeared first on Ripple.

Bullitt is turning smartphones into toolboxes

The content below is taken from the original ( Bullitt is turning smartphones into toolboxes), to continue reading please visit the site. Remember to respect the Author & Copyright.

 Given the fact that we already rely on them for pretty much everything else, why not just go all in and turn our smartphones in to literal toolboxes? Bullitt, the UK-based licensed phone manufacturer behind those Kodak handsets was on hand at Mobile World Congress this week, showing off a pair of super rugged handsets. They’re not for everyone, sure, but in a world where most phones… Read More

IDG Contributor Network: How to choose the right SD-WAN transport and why it matters

The content below is taken from the original ( IDG Contributor Network: How to choose the right SD-WAN transport and why it matters), to continue reading please visit the site. Remember to respect the Author & Copyright.

Businesses and their distributed enterprise locations grow more dependent on connected resources every day. That’s because employee and customer expectations and behaviors are evolving and having quick access to business information or constant connection to personal applications is changing the game for business networks. 

Every report I see indicates that our dependence on connected systems will continue to skyrocket. In fact, Cisco recently predicted that global IP traffic is set to nearly triple by 2021.

To read this article in full, please click here

Are You a Bad Enough Dude For Land Rover’s Toughest Phone Ever?

The content below is taken from the original ( Are You a Bad Enough Dude For Land Rover’s Toughest Phone Ever?), to continue reading please visit the site. Remember to respect the Author & Copyright.

Smartphones are basically super powerful little computers we carry around with us every day. With so much technology packed into such a light and small package, including huge fragile glass screens, we shouldn’t […]

The post Are You a Bad Enough Dude For Land Rover’s Toughest Phone Ever? appeared first on Geek.com.

Dutch Supermarket Sets Example With Plastic-Free Aisle

The content below is taken from the original ( Dutch Supermarket Sets Example With Plastic-Free Aisle), to continue reading please visit the site. Remember to respect the Author & Copyright.

The Dutch have done it again: Europe’s first plastic-free supermarket aisle opened on Wednesday in Amsterdam. A local branch of Ekoplaza invited shoppers to choose from more than 700 plastic-free products, including meat, […]

The post Dutch Supermarket Sets Example With Plastic-Free Aisle appeared first on Geek.com.

Bitnami Simplifies Cloud Migration with Stacksmith Service

The content below is taken from the original ( Bitnami Simplifies Cloud Migration with Stacksmith Service), to continue reading please visit the site. Remember to respect the Author & Copyright.

Bitnami, the leading provider of packaged applications for any platform, announced the availability of Bitnami Stacksmith , a tool that simplifies… Read more at VMblog.com.

Confidently plan your cloud migration: Azure Migrate is now generally available!

The content below is taken from the original ( Confidently plan your cloud migration: Azure Migrate is now generally available!), to continue reading please visit the site. Remember to respect the Author & Copyright.

A few months ago, we announced Azure Migrate – a new service that provides guidance and insights to help you migrate to Azure. Today, we’re excited to announce that Azure Migrate is generally available.

Azure Migrate is offered at no additional charge and provides appliance-based, agentless discovery of your on-premises environments. It enables discovery of VMware-virtualized Windows and Linux VMs today and will enable discovery of Hyper-V environments in the future. It also provides an optional, agent-based discovery for visualizing interdependencies between machines to identify multi-tier applications. This enables you to plan your migration across three dimensions:

  • Readiness: Are the machines that host my multi-tier application suitable for running in Azure?
  • Rightsizing: What size will my Azure VM be, based on my machine’s configuration or utilization?
  • Cost: How much will my recurring Azure costs be, taking into account discounts like Azure Hybrid Benefit?

Azure Migrate

Many of you are already using Azure Migrate in production to accelerate your migration journey. Thank you for using the preview service, and for providing us with valuable feedback. Here are some new features added after the preview:

  • Configuration-based sizing: Size your machine as-is, based on configuration settings such as number of CPU cores and size of memory, in addition to already supported sizing based on utilization of CPU, memory, disk, etc.
  • Confidence rating for assessments: Use a star rating to differentiate assessments that are based on more versus less utilization data points.
  • No charge for dependency visualization: Visualize network dependencies of your multi-tier application without getting charged for Service Map.

Service Map

  • More target regions: Assess your machines for target regions in China, Germany, and India. You can create migration projects in two regions – West Central US and East US. However, you can plan migrations to any of the 30 supported target regions.

As the saying goes, “If you fail to plan, you plan to fail.” Azure Migrate can help you do a great job of migration planning. We’re listening to your feedback and are continuing to add more features to help you plan migrations. However, we don’t want to stop there. We also want to provide a streamlined experience to perform migrations. Today, you can use services like Azure Site Recovery and Azure Database Migration Service to do this. Going forward, you can expect to see all that goodness integrated into Azure Migrate. That way, you’ll have a true single-stop shop for all your Azure migration needs.

You can get started by creating a migration project in the Azure portal. In addition…

  • Get and stay informed with our documentation.
  • Seek help by posting a question on our forum or contacting Microsoft Support.
  • Provide feedback by posting or voting for an idea in our user voice.

Happy migrating!

– Shon

Teams Now Supports Guest Users from Non-Office 365 Domains

The content below is taken from the original ( Teams Now Supports Guest Users from Non-Office 365 Domains), to continue reading please visit the site. Remember to respect the Author & Copyright.

Teams Splash

Teams Splash

An Open World of Guests for Teams

When Microsoft introduced the first iteration external (guest) access for Teams in September 2017, an important limitation existed. Guests could only come from Azure Active Directory domains with Office 365. Although there are some 130 million active Office 365 users, that’s still a subset of the folks that you might want to add as a guest user, including those who use other systems like Gmail or Yahoo!

The lack of support for non-Office 365 domains surprised many because Office 365 Groups support external access from these domains, and Teams uses Office 365 Groups. However, the connection between the two applications means nothing when it comes to controlling guest user access to resources. In fact, guest access to Office 365 Groups is based on an older SharePoint model that has been around for years and it only allows access to SharePoint resources. Teams is a very different application, so Microsoft needed to do extra work to make guest access safe and secure for these domains.

Now, maintaining the rapid cadence of updates Microsoft makes to Teams, you can add guest users with any email address to Teams. You can read Microsoft’s blog post on the topic to learn details of supported clients (for instance, you cannot invite guest users or redeem invitations on Teams mobile clients, while Safari is still a no-go browser for Teams). In the rest of this article, I look at how a guest user with one of the newly-supported email addresses joins a team.

The B2B Collaboration Basics

Teams is an application that uses many services drawn across Office 365, including Exchange Online (for its calendar and compliance records), SharePoint Online (for document management), and OneDrive for Business (personal sharing). External guest access uses Azure B2B Collaboration. Briefly, when you add a guest user to a team, Teams extends an invitation to that user to redeem and confirm their membership. The invitation email holds a link for the guest to enter the redemption process. When redemption is complete, a new Azure Active Directory user account (of type “Guest”) exists in the tenant directory. Access to application resources comes through this account.

Azure B2B Collaboration is also used within Office 365 to share documents from SharePoint and OneDrive sites and to allow access to Office 365 Groups (only the SharePoint resources, not conversations). Because other applications use Azure B2B Collaboration, an Azure Active Directory account might already exist for a guest user. If this happens, Teams uses that account.

Adding a new Guest User to a Team

All you need to add a new guest user to a team is their email address (Figure 1). Teams takes the address and checks whether a guest account. If not, Teams creates a prototype guest account that the user will later complete through the redemption process.

Teams add guest user

Figure 1: Adding a guest user to a team (image credit: Tony Redmond)

Notification Arrives

The next step is to issue the email invitation to the user. The user is already part of the team, and if their guest account is complete through redemption, they can click the Open Microsoft Teams link in the message (Figure 2) to go to the team.

Teams sharing invitation

Figure 2: A guest user receives an invitation to Teams (image credit: Tony Redmond)

Teams Redemption

Things are a little more complicated if the user has never been through the redemption process for the tenant before. The same link brings them into a process to prove their identity and give credentials to allow them to connect to the tenant in the future. The first step in the process is to sign-in (Figure 3). An email address already exists to use as the basis for the User Principal Name for the account, so what’s missing is a password, which the user sets up at this point. If the host tenant uses multi-factor authentication to protect accounts in general or Teams as an application (using a conditional access policy), they must also establish how they will prove their MFA credentials.

Teams redeem invitatioin

Figure 3: Redeeming the invitation (image credit: Tony Redmond)

When everything is complete, Azure Active Directory enables the guest account and the user can go through a normal sign-in (Figure 4) to connect to the link to Teams shown in Figure 3. You can see that the account name used to sign in is the guest user’s email address.

Teams sign in

Figure 4: Signing into the guest user account (image credit: Tony Redmond)

Guest Rights

When connected, a guest user shows up in the same way as any other user (Figure 5) and has much the same rights as a tenant user. Among the things a guest can’t do is to create new meetings or view organizational information in the tenant directory. These restrictions exist because of technical issues (guests can read, but not write to the group calendar in the Exchange mailbox), or to protect data within the tenant.

Teams manage membership

Figure 5: Guest users show up as normal users in a team (image credit: Tony Redmond)

Although guests cannot browse the tenant directory to find new teams to join, if they have access to Office 365 Groups and the groups are team-enabled, they automatically gain access to those teams. Therefore, a guest accessing teams for the first time in a tenant might discover that they can use many other teams than the one for which they received an invitation.

Behind the AAD Scenes

As noted earlier, Azure B2B Collaboration creates guest user accounts to enable access. If we look at guest accounts, we see that they have a special type, and created through an invitation process. Also, the email address for the guest gives the basis of the sign-on address and allows the account to be mail-enabled.

Get-AzureADUser -ObjectId 7741ac6e-30c2-40da-adcb-e54e8c4b1b54 | Format-List
ObjectId                       : 7741ac6e-30c2-40da-adcb-e54e8c4b1b54
ObjectType                     : User
AccountEnabled                 : True
AssignedLicenses               : {}
CreationType                   : Invitation
DisplayName                    : Tony's Yandex Account
Mail                           : [email protected]
MailNickName                   : tredmond_yandex.com#EXT#
OtherMails                     : {[email protected]}
ProxyAddresses                 : {SMTP:[email protected]}
UserPrincipalName              : tredmond_yandex.com#EXT#@Rmytenant.onmicrosoft.com
UserType                       : Guest

To find all guest accounts in a tenant, use this command:

Get-AzureADUser -Filter "UserType eq 'Guest'"

Sponsored

Access for All

Because it allows many more potential collaborators into the Teams tent, adding guest access for non-Office 365 domains is a big thing. I’d like to see Teams progress by making the process to switch tenants smoother and to allow mobile clients to switch tenants. Meantime, Microsoft continues the push to add new calling functionality so that Teams can replace the Skype for Business Online client. At times, so much happens, it’s quite wearisome to keep track on everything.

Follow Tony on Twitter @12Knocksinna.

Want to know more about how to manage Office 365? Find what you need to know in “Office 365 for IT Pros”, the most comprehensive eBook covering all aspects of Office 365. Available in PDF and EPUB formats (suitable for iBooks) or for Amazon Kindle.

The post Teams Now Supports Guest Users from Non-Office 365 Domains appeared first on Petri.