Daily.Entra.NewsDaily AI-generated highlights from Microsoft Learn and Message Center. Browse the archive from 15 April 2025 → About this project →
The clearest administrator-facing update is connector guidance specifying dynamic TCP ports 49152–65535 and AutoReuse TCP ports 10000–49151, with non-overlapping ranges, Windows Server 2016+ prerequisites, and configuration and verification commands. Entra Conditional Access guidance now makes the device-platform limitation explicit: user-agent-derived information can be modified and is not verified. Other updates refine connector terminology and Exchange role-assignment instructions.
Global Secure Access · FundamentalsThe connector guidance specifies non-overlapping dynamic TCP ports 49152–65535 and AutoReuse TCP ports 10000–49151. It adds configuration and verification commands, requires Windows Server 2016 or later, and clarifies that AutoReuse applies only to TCP.
Global Secure Access · MonitoringThe configuration page now describes performance and scalability in terms of configuring dynamic and AutoReuse TCP port ranges instead of extending TCP and UDP ephemeral ports.
Entra ID · Conditional AccessThe conditions guidance says device-platform information, including user-agent strings, can be modified and is not verified. It recommends using the condition with Microsoft Intune device compliance policies or in a block statement.
The policy guidance recommends pairing device-platform conditions with policies that require device compliance or app protection to reduce risk.
Entra ID · FundamentalsFor role assignments through dynamic membership groups, administrators are directed to the Exchange admin center. When the old Exchange admin center is required, the guidance says to assign the eligible role directly to the user rather than through role-assignable groups; Exchange PowerShell cmdlets continue to work as expected.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation now warns that device platform information, such as user agent strings, can be modified and isn't verified. It recommends using device platform with Microsoft Intune device compliance policies or in a block statement.
The guidance now directs administrators to the Exchange admin center for role assignments through dynamic membership groups. If the old Exchange admin center is required, assign the eligible role directly to the user rather than through role-assignable groups; Exchange PowerShell cmdlets work as expected.
The documentation now highlights that device platform conditions rely on user agent strings and recommends pairing them with policies requiring device compliance or app protection to reduce risk.
The documentation specifies non-overlapping dynamic TCP ports 49152–65535 and AutoReuse TCP ports 10000–49151, with new configuration and verification commands. It also adds Windows Server 2016+ prerequisites and clarifies that AutoReuse applies only to TCP.
The connector configuration guidance now refers to configuring dynamic and AutoReuse TCP port ranges instead of extending TCP and UDP ephemeral ports.
