Skip to content

Default Settings - Password Rule Settings - Password Protection - Mode

Why This Matters

Microsoft Entra Password Protection helps prevent users from setting weak or easily guessable passwords. When the mode is set to "Audit" instead of "Enforce", weak passwords are logged but not blocked, leaving your organization exposed to password attacks such as brute force or dictionary-based breaches.

What Aether365 Checks

Aether365 verifies that the Password Protection mode is set to "Enforce" rather than "Audit" in your Microsoft Entra ID tenant settings. This check appears in the Aether365 dashboard under the entra-id section as check EIDSCA.PR01.

Microsoft references

Was this page helpful?