Head to Settings > Apps and take some time to remove anything that looks suspicious or you no longer use. Only eligible authorized users can read or request the reset of these local administrator account passwords. The timelines for the roadmap are approximate and are based on our experience with customer implementations. Phase 1 is designed to be implemented in approximately 30 days and is depicted in this diagram:To help separate internet risks (phishing attacks, web browsing) from privileged access accounts, create a dedicated account for all personnel with privileged access. The security of most or all business assets in an IT organization depends on the integrity of the privileged accounts used to administer, manage, and develop. To review and adjust your security settings and get recommendations to help you keep your account secure, sign in to your account. We recommend you view security as an ongoing process focused on raising the cost and reducing the success rate of adversaries targeting your environment.While it is not the only part of your organization's security program securing privileged access is a critical component of your security strategy. An official website of the United States GovernmentAn IRS online services account lets you access most tax tools with the same username and password.When you register for online services, we ask you to verify your identity so no one else can access your IRS online account. The duration will vary in your organization depending on the complexity of your environment and your change management processes.Phase 1 of the roadmap is focused on quickly mitigating the most frequently used attack techniques of credential theft and abuse. This capability helps to prevent credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket by increasing the difficulty of pivoting in the environment using stolen credentials. Traditional security approaches have focused on the network and firewalls as the primary security perimeter, but the effectiveness of network security has been significantly diminished by two trends:These factors necessitate building a modern security perimeter out of authentication and authorization identity controls in addition to the traditional network perimeter strategy. Securing privileged access is a critical first step to establishing security assurances for business assets in a modern organization. You may adjust this roadmap to accommodate your existing capabilities and specific requirements in your organizations.Securing privileged access requires a broad range of elements including technical components (host defenses, account protections, identity management, etc.)

Privileged accounts are effectively in control of this new security perimeter so it's critical to protect privileged access.An attacker that gains control of an administrative account can use those privileges to increase their impact in the target organization as depicted below:A "blue" path where a standard user account is used for non-privileged access to resources like email and web browsing and day to day work are completed.Blue path items described later on indicate broad environmental protections that extend beyond the administrative accounts.A "red" path where privileged access occurs on a hardened device to reduce the risk of phishing and other web and email attacks.The roadmap is designed to maximize the use of Microsoft technologies that you already have deployed, take advantage of cloud technologies to enhance security, and integrate any 3rd party security tools you may already have deployed.The roadmap of Microsoft recommendations is broken into 3 phases:The roadmap is prioritized to schedule the most effective and the quickest implementations first based on our experiences with these attacks and solution implementation.Microsoft recommends you follow this roadmap to secure privileged access against determined adversaries. Admins can replace their complex passwords with strong two-factor authentication on their PCs. We will send a one-time activation code to your mobile phone number. You can then:Each time you log in, we send a security code via text message or phone call. This roadmap can help your organization protect against currently known threats as attackers will constantly evolve and shift. The articles This is part of the beyond plan because aggregating, creating, and tuning alerts in a security information and event management (SIEM) requires skilled analysts (unlike Azure ATP in the 30 day plan which includes out of the box alerting)Continue to enhance your security posture by enabling Azure AD Identity Protection to automatically force password resets when passwords are suspected of compromise. Other apps can have access to your Facebook account, too.