[{"id":399,"title":"\u00a0Basic Auth: Exchange Online\u2019da G\u00fcvenli Bir Gelece\u011fe Haz\u0131r m\u0131s\u0131n\u0131z?","content":"<div id=\"model-response-message-contentr_4898b336d0b74a7a\" class=\"markdown markdown-main-panel enable-updated-hr-color preserve-whitespaces-in-response\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<p data-path-to-node=\"4\">Dijital d&uuml;nyada g&uuml;venlik, dura\u011fan bir hedef de\u011fil; s&uuml;rekli geli\u015fen bir yolculuk. Microsoft, bu yolculu\u011fun en &ouml;nemli duraklar\u0131ndan birini daha duyurdu:&nbsp;<strong data-path-to-node=\"4\" data-index-in-node=\"151\">Aral\u0131k 2026 itibar\u0131yla SMTP AUTH i&ccedil;in Temel Kimlik Do\u011frulama (Basic Authentication) d&ouml;nemi kapan\u0131yor.<\/strong><\/p>\n<p data-path-to-node=\"5\">Peki, bu de\u011fi\u015fim kap\u0131n\u0131z\u0131 &ccedil;almadan &ouml;nce neler bilmeniz gerekiyor? Gelin, bu s&uuml;reci bir kriz de\u011fil, bir dijital d&ouml;n&uuml;\u015f&uuml;m f\u0131rsat\u0131 olarak birlikte inceleyelim.<\/p>\n<h2 data-path-to-node=\"6\">Neler De\u011fi\u015fiyor? (Zaman &Ccedil;izelgesi)<\/h2>\n<p data-path-to-node=\"7\">De\u011fi\u015fim birden bire kap\u0131n\u0131za dayanmayacak. Microsoft, adaptasyon s&uuml;reci i&ccedil;in makul bir takvim sunuyor:<\/p>\n<ul data-path-to-node=\"8\">\n<li>\n<p data-path-to-node=\"8,0,0\"><strong data-path-to-node=\"8,0,0\" data-index-in-node=\"0\">\u015eimdi - Aral\u0131k 2026:<\/strong> Mevcut d&uuml;zeninizde bir de\u011fi\u015fiklik yok, ancak haz\u0131rl\u0131k yapmak i&ccedil;in en ideal zaman dilimindeyiz.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"8,1,0\"><strong data-path-to-node=\"8,1,0\" data-index-in-node=\"0\">Aral\u0131k 2026 Sonu:<\/strong> SMTP AUTH Temel Kimlik Do\u011frulama, mevcut kirac\u0131lar (tenants) i&ccedil;in varsay\u0131lan olarak <strong data-path-to-node=\"8,1,0\" data-index-in-node=\"102\">devre d\u0131\u015f\u0131<\/strong> b\u0131rak\u0131lacak. (Not: \u0130htiya&ccedil; duyarsan\u0131z y&ouml;neticiler hala manuel olarak a&ccedil;abilecek.)<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"8,2,0\"><strong data-path-to-node=\"8,2,0\" data-index-in-node=\"0\">Yeni Kirac\u0131lar:<\/strong> Aral\u0131k 2026'dan sonra olu\u015fturulan yeni hesaplarda art\u0131k bu se&ccedil;enek hi&ccedil; olmayacak. Standart art\u0131k <strong data-path-to-node=\"8,2,0\" data-index-in-node=\"113\">OAuth<\/strong>.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"8,3,0\"><strong data-path-to-node=\"8,3,0\" data-index-in-node=\"0\">2027 ve Sonras\u0131:<\/strong> Y\u0131l\u0131n ikinci yar\u0131s\u0131nda Microsoft, bu y&ouml;ntemin tamamen emekli edilece\u011fi final tarihini a&ccedil;\u0131klayacak.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"9\">\n<h2 data-path-to-node=\"10\">Bu De\u011fi\u015fime Nas\u0131l Haz\u0131rlanmal\u0131s\u0131n\u0131z?<\/h2>\n<p data-path-to-node=\"11\">G&uuml;venlik duvarlar\u0131n\u0131z\u0131 g&uuml;&ccedil;lendirmek ve e-posta ak\u0131\u015f\u0131n\u0131z\u0131n kesilmesini &ouml;nlemek i&ccedil;in \u015fu ad\u0131mlar\u0131 takip edebilirsiniz:<\/p>\n<h4 data-path-to-node=\"12\">1. Modern Do\u011frulamaya (OAuth) Ge&ccedil;i\u015f Yap\u0131n<\/h4>\n<p data-path-to-node=\"13\">E\u011fer kulland\u0131\u011f\u0131n\u0131z uygulama veya istemci OAuth destekliyorsa, vakit kaybetmeden IMAP, POP veya SMTP ba\u011flant\u0131lar\u0131n\u0131z\u0131 bu y&ouml;ntemle g&uuml;ncelleyin. Bu, veri g&uuml;venli\u011finiz i&ccedil;in ataca\u011f\u0131n\u0131z en sa\u011fl\u0131kl\u0131 ad\u0131md\u0131r.<\/p>\n<h4 data-path-to-node=\"14\">2. Alternatif &Ccedil;&ouml;z&uuml;mleri De\u011ferlendirin<\/h4>\n<p data-path-to-node=\"15\">Cihaz\u0131n\u0131z veya yaz\u0131l\u0131m\u0131n\u0131z OAuth desteklemiyorsa endi\u015felenmeyin, hala se&ccedil;enekleriniz var:<\/p>\n<ul data-path-to-node=\"16\">\n<li>\n<p data-path-to-node=\"16,0,0\"><strong data-path-to-node=\"16,0,0\" data-index-in-node=\"0\">Y&uuml;ksek Hacimli E-posta (HVE):<\/strong> Kurum i&ccedil;i g&ouml;nderimleriniz i&ccedil;in Microsoft 365'in bu yeni &ccedil;&ouml;z&uuml;m&uuml;n&uuml; kullanabilirsiniz.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"16,1,0\"><strong data-path-to-node=\"16,1,0\" data-index-in-node=\"0\">Hibrit Yap\u0131lar:<\/strong> E\u011fer On-premises bir Exchange sunucunuz varsa, anonim aktarma sa\u011flayan \"Receive Connector\" yap\u0131land\u0131rmas\u0131yla yola devam edebilirsiniz.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"16,2,0\"><strong data-path-to-node=\"16,2,0\" data-index-in-node=\"0\">&Uuml;&ccedil;&uuml;nc&uuml; Parti &Ccedil;&ouml;z&uuml;mler:<\/strong> \u0130htiya&ccedil;lar\u0131n\u0131za g&ouml;re profesyonel SMTP relay servislerini de\u011ferlendirmek de masadaki se&ccedil;eneklerden biri.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"17\">\n<h2 data-path-to-node=\"18\">\u015eimdiden Kontrol&uuml; Elinize Al\u0131n<\/h2>\n<p data-path-to-node=\"19\">\"Gelecekteki ben\"e bir iyilik yap\u0131n ve \u015fimdiden kurulu\u015funuzdaki durumu analiz edin. Exchange Y&ouml;netim Merkezi &uuml;zerinden SMTP AUTH protokol&uuml;n&uuml; kapatabilir veya PowerShell kullanarak hangi kullan\u0131c\u0131lar\u0131n hala eski y&ouml;ntemi kulland\u0131\u011f\u0131n\u0131 tespit edebilirsiniz.<\/p>\n<blockquote data-path-to-node=\"20\">\n<p data-path-to-node=\"20,0\"><strong data-path-to-node=\"20,0\" data-index-in-node=\"0\">Unutmay\u0131n:<\/strong> Bu de\u011fi\u015fiklik sadece teknik bir zorunluluk de\u011fil; verilerinizi, itibar\u0131n\u0131z\u0131 ve ileti\u015fiminizi korumak i&ccedil;in at\u0131lm\u0131\u015f dev bir ad\u0131md\u0131r.<\/p>\n<\/blockquote>\n<p data-path-to-node=\"21\"><strong data-path-to-node=\"21\" data-index-in-node=\"0\">Siz bu ge&ccedil;i\u015fe haz\u0131r m\u0131s\u0131n\u0131z?<\/strong> E\u011fer teknik ad\u0131mlar konusunda yard\u0131ma ihtiyac\u0131n\u0131z varsa veya hangi y&ouml;ntemin size uygun oldu\u011funu tart\u0131\u015fmak isterseniz, yorumlarda bulu\u015fal\u0131m!<\/p>\n<hr data-path-to-node=\"22\">\n<p data-path-to-node=\"23\"><strong data-path-to-node=\"23\" data-index-in-node=\"0\">\u0130lginizi &ccedil;ekebilecek ba\u011flant\u0131lar:<\/strong><\/p>\n<ul data-path-to-node=\"24\">\n<li>\n<p data-path-to-node=\"24,0,0\"><a class=\"ng-star-inserted\" href=\"..\/..\/microsoft-365-te-yuksek-hacimli-e-posta-nasil-yapilandirilir\" target=\"_blank\" rel=\"noopener\" data-hveid=\"0\" data-ved=\"0CAAQ_4QMahgKEwiluvvbjvmSAxUAAAAAHQAAAAAQwgE\">M365 Y&uuml;ksek Hacimli E-posta Detaylar\u0131<\/a><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"25\">\n<p data-path-to-node=\"26\">&nbsp;<\/p>\n<\/div>","excerpt":"\u00a0Aral\u0131k 2026 itibar\u0131yla SMTP AUTH i\u00e7in Temel Kimlik Do\u011frulama (Basic Authentication) d\u00f6nemi kapan\u0131yor.","created_at":"2026-02-27 10:50:20","updated_at":"2026-09-23 15:09:57","category_id":6,"view_count":651,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-02-27 07:50:20","featured_image":"\/uploads\/images\/2026\/02\/69a14ca79e522_1772178599.png","slug":"basic-auth-exchange-online-da-guvenli-bir-gelecege-hazir-misiniz","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":398,"title":"Microsoft 365'te Y\u00fcksek Hacimli E-posta Nas\u0131l Yap\u0131land\u0131r\u0131l\u0131r?","content":"<p>Kurulu\u015funuz dahili olarak &ccedil;ok say\u0131da e-posta g&ouml;nderirse, bir s\u0131n\u0131rla kar\u015f\u0131la\u015fabilir ve bu da gecikmelere ve sorunlara yol a&ccedil;abilir. Microsoft 365'te Y&uuml;ksek Hacimli E-posta, bir organizasyonun herhangi bir h\u0131z s\u0131n\u0131r\u0131 olmadan y&uuml;ksek hacimlerde dahili ve harici mesaj g&ouml;ndermesini sa\u011flayan bir hizmettir. Bu makalede, Exchange Online'da Y&uuml;ksek Hacimli E-posta'y\u0131 nas\u0131l yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 &ouml;\u011freneceksiniz.<\/p>\n<h2 id=\"h-high-volume-email-hve\" class=\"wp-block-heading\">Y&uuml;ksek Hacimli E-posta (HVE)<\/h2>\n<p>Microsoft 365'te Y&uuml;ksek Hacimli E-posta, esas olarak Exchange Online ile dahili ve s\u0131n\u0131rl\u0131 say\u0131da harici e-posta g&ouml;ndermek isteyen kurulu\u015flar i&ccedil;indir. Kurmak i&ccedil;in, toplu e-posta g&ouml;ndermeye ba\u015flamadan &ouml;nce bir HVE hesab\u0131 olu\u015fturman\u0131z gerekir.<\/p>\n<p data-slot-rendered-content=\"true\">A\u015fa\u011f\u0131daki tablo, standart Microsoft 365 posta kutusu ile HVE posta kutusu aras\u0131ndaki s\u0131n\u0131rlar\u0131 g&ouml;stermektedir.<\/p>\n<table class=\"has-fixed-layout\">\n<thead>\n<tr>\n<th>&nbsp;<\/th>\n<th><strong>Standard Microsoft 365 mailbox<\/strong><\/th>\n<th><strong>Y&uuml;ksek Hacimli E-posta (HVE)<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Dahili al\u0131c\u0131lar\u0131n maksimumu<\/strong><\/td>\n<td>G&uuml;nde 10.000 al\u0131c\u0131<\/td>\n<td>S\u0131n\u0131r yok<\/td>\n<\/tr>\n<tr>\n<td><strong>Mesaj h\u0131z s\u0131n\u0131r\u0131<\/strong><\/td>\n<td>Dakikada 30 mesaj<\/td>\n<td>S\u0131n\u0131r yok<\/td>\n<\/tr>\n<tr>\n<td><strong>Kirac\u0131 ba\u015f\u0131na hesaplar<\/strong><\/td>\n<td>\u0130\u015fletme planlar\u0131<br>i&ccedil;in 300'e kadar Kurumsal planlar i&ccedil;in Unlimited<\/td>\n<td>100 hesap<\/td>\n<\/tr>\n<tr>\n<td><strong>D\u0131\u015f al\u0131c\u0131lar\u0131n maksimumu<\/strong><\/td>\n<td>Kirac\u0131 lisans\u0131 ve lisans say\u0131s\u0131na ba\u011fl\u0131<\/td>\n<td>0 (desteklenmiyor)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2 id=\"h-how-to-create-a-high-volume-email-account\" class=\"wp-block-heading\">Y&uuml;ksek Hacimli E-posta hesab\u0131 nas\u0131l olu\u015fturulur?<\/h2>\n<p>Y&uuml;ksek Hacimli E-posta hesab\u0131n\u0131 Exchange y&ouml;netim merkezi veya PowerShell ile yap\u0131land\u0131rabilirsiniz.<\/p>\n<h3 id=\"h-create-hve-account-in-exchange-admin-center\" class=\"wp-block-heading\">Exchange y&ouml;netim merkezinde HVE hesab\u0131 olu\u015fturun<\/h3>\n<p>Exchange y&ouml;netim merkezinde bir HVE hesab\u0131 yap\u0131land\u0131rmak i&ccedil;in \u015fu ad\u0131mlar\u0131 izleyin:<\/p>\n<ol class=\"wp-block-list\">\n<li><a href=\"https:\/\/admin.cloud.microsoft\/exchange#\/\" target=\"_blank\" rel=\"noreferrer noopener\">Exchange y&ouml;netim merkezine<\/a>&nbsp;giri\u015f yap\u0131n<\/li>\n<li><strong>E-posta ak\u0131\u015f\u0131na &gt; Y&uuml;ksek Hacimli E-posta<\/strong>&nbsp;Mesaj\u0131na t\u0131klay\u0131n<\/li>\n<li><strong>T\u0131klay\u0131n Bir HVE hesab\u0131 ekle<\/strong><\/li>\n<\/ol>\n<p><strong><img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a148870ab5e_1772177543.png\"><\/strong><\/p>\n<p>&nbsp;<\/p>\n<ol class=\"wp-block-list\" start=\"4\">\n<li><strong>Display ad\u0131n\u0131<\/strong>&nbsp;yaz\u0131n<\/li>\n<li><strong>Ana e-posta adresini<\/strong>&nbsp;yaz\u0131n<\/li>\n<li><strong>Bir \u015eifre<\/strong>&nbsp;Olu\u015ftur<\/li>\n<li><strong>\u015eifreyi onayla<\/strong><\/li>\n<li><strong>Sonraki'ye<\/strong> t\u0131klay\u0131n<strong><img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a14897ade36_1772177559.png\"><\/strong><\/li>\n<\/ol>\n<p><strong>9. Olu\u015ftur<\/strong>&nbsp;d&uuml;\u011fmesine t\u0131klay\u0131n<\/p>\n<p><img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a148d2b029b_1772177618.png\"><\/p>\n<ol class=\"wp-block-list\" start=\"10\">\n<li><strong>T\u0131k Tamam<\/strong><\/li>\n<li>Yeni&nbsp;<strong>HVE hesab\u0131n\u0131<\/strong>&nbsp;listede g&ouml;rebilirsiniz<\/li>\n<\/ol>\n<p><img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a148f072063_1772177648.png\"><\/p>\n<p><strong>Not:&nbsp;HVE hesab\u0131 &ouml;zel bir posta kullan\u0131c\u0131 hesab\u0131d\u0131r, bu y&uuml;zden Exchange y&ouml;netim merkezindeki&nbsp;<em>Ki\u015filer<\/em> b&ouml;l&uuml;m&uuml;nde de g&ouml;receksiniz.<\/strong><\/p>\n<p><strong><img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a14900ee26c_1772177664.png\"><\/strong><\/p>\n<p>&nbsp;<\/p>\n<h3 id=\"h-create-hve-account-with-powershell\" class=\"wp-block-heading\">PowerShell ile HVE hesab\u0131 olu\u015fturun<\/h3>\n<p>PowerShell ile bir HVE hesab\u0131 yap\u0131land\u0131rmak i&ccedil;in a\u015fa\u011f\u0131daki komutlar\u0131 &ccedil;al\u0131\u015ft\u0131r\u0131n.<\/p>\n<ol class=\"wp-block-list\">\n<li><strong>Ad\u0131<\/strong>&nbsp;ve&nbsp;<strong>Birincil SMTP adresini<\/strong> 2. sat\u0131ra yaz\u0131n.<\/li>\n<\/ol>\n<pre class=\"language-markup\"><code>$NewPassword = Read-Host -AsSecureString \"Enter your password\"\nNew-MailUser -HVEAccount -Name \"HVE02\" -Password $NewPassword -PrimarySmtpAddress \"HVE02@m365info.com\"<\/code><\/pre>\n<ol class=\"wp-block-list\" start=\"2\">\n<li>Kirac\u0131 ayarlar\u0131n\u0131za uyan karma\u015f\u0131k&nbsp;<strong>bir \u015fifre<\/strong> girin.<\/li>\n<\/ol>\n<pre class=\"language-markup\"><code>Enter your password: ***************<\/code><\/pre>\n<ol class=\"wp-block-list\" start=\"3\">\n<li>A\u015fa\u011f\u0131daki &ccedil;\u0131kt\u0131ya bak\u0131n\u0131z.<\/li>\n<\/ol>\n<div class=\"code-toolbar\">\n<pre class=\"language-markup\"><code>Name  RecipientType\n----  -------------\nHVE02 MailUser<\/code><\/pre>\n<\/div>\n<div class=\"code-toolbar\">&nbsp;<\/div>\n<div class=\"code-toolbar\">&nbsp;<\/div>\n<div class=\"code-toolbar\">\n<h2 id=\"h-enable-smtp-basic-authentication\" class=\"wp-block-heading\">SMTP Temel Kimlik Do\u011frulamas\u0131n\u0131 Etkinle\u015ftir<\/h2>\n<p>SMTP Temel Kimlik Do\u011frulama ile Microsoft 365 i&ccedil;in Y&uuml;ksek Hacimli E-posta kullanmak i&ccedil;in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 takip etmeniz gerekir:<\/p>\n<ol class=\"wp-block-list\">\n<li>A\u015fa\u011f\u0131daki PowerShell komutuyla kurulu\u015funuzda SMTP Temel Kimlik Do\u011frulamas\u0131na izin veren yeni bir kimlik do\u011frulama politikas\u0131&nbsp;<a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/exchange\/new-authenticationpolicy\" target=\"_blank\" rel=\"noreferrer noopener\">olu\u015fturmak i&ccedil;in New-AuthenticationPolicy<\/a>&nbsp;komutunu kullan\u0131n.<\/li>\n<\/ol>\n<div class=\"code-toolbar\">\n<pre class=\"wp-block-prismatic-blocks language-powershell\" tabindex=\"0\"><code>New-AuthenticationPolicy -Name \"High Volume Email\" -AllowBasicAuthSmtp<\/code><\/pre>\n<\/div>\n<\/div>\n<div class=\"code-toolbar\">&nbsp;<\/div>\n<div class=\"code-toolbar\">&nbsp;<\/div>\n<div class=\"code-toolbar\">\n<ol class=\"wp-block-list\" start=\"2\">\n<li>HVE hesab\u0131n\u0131 (<em>HVE01@m365info.com)<\/em>&nbsp;yeni olu\u015fturdu\u011funuz kimlik do\u011frulama politikas\u0131na ayarlay\u0131n.<\/li>\n<\/ol>\n<div class=\"code-toolbar\">\n<pre class=\"wp-block-prismatic-blocks language-powershell\" tabindex=\"0\"><code>Set-User \"HVE01@m365info.com\" -AuthenticationPolicy \"High Volume Email\" -Confirm:$false<\/code><\/pre>\n<div class=\"toolbar\">\n<div class=\"toolbar-item\">&nbsp;<\/div>\n<\/div>\n<\/div>\n<p>Varsay\u0131lan olarak, kullan\u0131c\u0131lar &uuml;zerinde kimlik do\u011frulama politikas\u0131 atamas\u0131n\u0131 olu\u015fturdu\u011funuzda veya de\u011fi\u015ftirdi\u011finizde veya politikay\u0131 g&uuml;ncellerseniz, de\u011fi\u015fiklikler 24 saat i&ccedil;inde y&uuml;r&uuml;rl&uuml;\u011fe girer.<\/p>\n<ol class=\"wp-block-list\" start=\"3\">\n<li>Politikan\u0131n 30 dakika i&ccedil;inde y&uuml;r&uuml;rl&uuml;\u011fe girmesini istiyorsan\u0131z, a\u015fa\u011f\u0131daki PowerShell komutunu &ccedil;al\u0131\u015ft\u0131r\u0131n.<\/li>\n<\/ol>\n<div class=\"code-toolbar\">\n<pre class=\"wp-block-prismatic-blocks language-powershell\" tabindex=\"0\"><code>Set-User -Identity \"HVE01@m365info.com\" -STSRefreshTokensValidFrom $([System.DateTime]::UtcNow) -Confirm:$false<\/code><\/pre>\n<div class=\"toolbar\">\n<div class=\"toolbar-item\">&nbsp;<\/div>\n<\/div>\n<\/div>\n<h2 id=\"h-disable-security-defaults\" class=\"wp-block-heading\">G&uuml;venlik Varsay\u0131lanlar\u0131n\u0131 Devre D\u0131\u015f\u0131 B\u0131rak\u0131n<\/h2>\n<p>Kurulu\u015funuzda Ko\u015fullu Eri\u015fim politikalar\u0131 kullanm\u0131yorsan\u0131z,&nbsp;<a href=\"https:\/\/www.alitajran.com\/disable-security-defaults\/\" target=\"_blank\" rel=\"noreferrer noopener\">G&uuml;venlik Varsay\u0131lanlar\u0131n\u0131 devre d\u0131\u015f\u0131<\/a>&nbsp;b\u0131rakmal\u0131s\u0131n\u0131z.<\/p>\n<p>Kurulu\u015funuz Ko\u015fullu Eri\u015fim politikalar\u0131 kullan\u0131yorsa, G&uuml;venlik Varsay\u0131lan Ayarlar\u0131 varsay\u0131lan olarak devre d\u0131\u015f\u0131 b\u0131rak\u0131l\u0131r. Bu nedenle,&nbsp;<strong>\u015eartlar &gt; \u0130stemci uygulamalar\u0131n\u0131n<\/strong> yap\u0131land\u0131r\u0131lmad\u0131\u011f\u0131n\u0131 kontrol etmeli veya HVE hesab\u0131n\u0131 politikadan hari&ccedil; tutmal\u0131s\u0131n\u0131z.<\/p>\n<\/div>\n<div class=\"code-toolbar\">&nbsp;<\/div>\n<div class=\"code-toolbar\"><img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a1497224143_1772177778.png\"><\/div>\n<div class=\"code-toolbar\">&nbsp;<\/div>\n<div class=\"code-toolbar\">\n<h2 id=\"h-smtp-authentication-details\" class=\"wp-block-heading\">SMTP Do\u011frulama detaylar\u0131<\/h2>\n<p>HVE hesab\u0131n\u0131 yap\u0131land\u0131rmak i&ccedil;in a\u015fa\u011f\u0131daki gereksinimleri kullanman\u0131z gerekir:<\/p>\n<ul class=\"wp-block-list\">\n<li>Sunucu\/U&ccedil; nokta: smtp-have.office365.com<\/li>\n<li>Liman: 587<\/li>\n<li>TLS: STARTTLS<\/li>\n<li>TLS 1.2 ve TLS 1.3 desteklenmektedir<\/li>\n<li>Kimlik do\u011frulama: Kullan\u0131c\u0131 ad\u0131 ve \u015fifre<\/li>\n<\/ul>\n<p>Bir sonraki ad\u0131mda, yukar\u0131daki detaylar\u0131 kullanarak HVE hesab\u0131ndan bir e-posta g&ouml;nderece\u011fiz ve her \u015feyin do\u011fru yap\u0131land\u0131r\u0131l\u0131p yap\u0131land\u0131r\u0131lmad\u0131\u011f\u0131n\u0131 kontrol edece\u011fiz.<\/p>\n<h2 id=\"h-send-an-email-via-powershell\" class=\"wp-block-heading\">PowerShell &uuml;zerinden e-posta g&ouml;nderin<\/h2>\n<\/div>\n<div class=\"code-toolbar\">HVE hesab\u0131n\u0131n yap\u0131land\u0131rmas\u0131n\u0131 do\u011frulamak i&ccedil;in, PowerShell &uuml;zerinden bir al\u0131c\u0131ya posta g&ouml;nderebilirsiniz.<\/div>\n<div class=\"code-toolbar\">&nbsp;<\/div>\n<div class=\"code-toolbar\"><strong>Not:<\/strong>&nbsp;<a href=\"https:\/\/o365info.com\/send-email-powershell\/\">PowerShell ile e-posta g&ouml;ndermek i&ccedil;in &ouml;nerilen Send-MailKitMessage mod&uuml;l&uuml;n&uuml;<\/a>&nbsp;y&uuml;klemeniz gerekir. Bunun sebebi&nbsp;<a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/microsoft.powershell.utility\/send-mailmessage\" target=\"_blank\" rel=\"noreferrer noopener\">Send-MailMessage<\/a> cmdlet'inin art\u0131k modas\u0131 ge&ccedil;mi\u015f olmas\u0131.<\/div>\n<div class=\"code-toolbar\">&nbsp;<\/div>\n<div class=\"code-toolbar\">\n<p>Microsoft 365'te HVE hesab\u0131n\u0131 test etmek i&ccedil;in a\u015fa\u011f\u0131daki PowerShell betikini kullan\u0131n:<\/p>\n<ol class=\"wp-block-list\">\n<li>5. sat\u0131rda&nbsp;<strong>HVE birincil SMTP adresini<\/strong>&nbsp;belirtin<\/li>\n<li>8. sat\u0131rda&nbsp;<strong>SMTPServer'i<\/strong>&nbsp;belirtin<\/li>\n<li><strong>Port<\/strong>&nbsp;numaras\u0131n\u0131 11. sat\u0131rda belirtin<\/li>\n<li>14. sat\u0131rda&nbsp;<strong>From<\/strong>&nbsp;belirt<\/li>\n<li><strong>Sat\u0131rda RecipientList<\/strong>&nbsp;posta kutusunu belirtin<\/li>\n<li>21. sat\u0131rda&nbsp;<strong>Konuyu<\/strong>&nbsp;belirt<\/li>\n<li><strong>TextBody<\/strong>&nbsp;24. sat\u0131rda belirtin<\/li>\n<li>PowerShell betikini&nbsp;<strong>&ccedil;al\u0131\u015ft\u0131r<\/strong>\n<pre class=\"language-markup\"><code># Use secure connection if available ([bool], optional)\n$UseSecureConnectionIfAvailable = $true\n\n# Authentication ([System.Management.Automation.PSCredential], optional)\n$Credential = [System.Management.Automation.PSCredential]::new(\"HVE01@m365info.com\", (Read-Host -Prompt \"Enter password\" -AsSecureString))\n\n# SMTP server ([string], required)\n$SMTPServer = \"smtp-hve.office365.com\"\n\n# Port ([int], required)\n$Port = \"587\"\n\n# Sender ([MimeKit.MailboxAddress] http:\/\/www.mimekit.net\/docs\/html\/T_MimeKit_MailboxAddress.htm, required)\n$From = [MimeKit.MailboxAddress]\"HVE01@m365info.com\"\n\n# Recipient list ([MimeKit.InternetAddressList] http:\/\/www.mimekit.net\/docs\/html\/T_MimeKit_InternetAddressList.htm, required)\n$RecipientList = [MimeKit.InternetAddressList]::new()\n$RecipientList.Add([MimeKit.InternetAddress]\"Alexus.Bardot@gmail.com\")\n\n# Subject ([string], optional)\n$Subject = [string]\"This is the subject\"\n\n# Text body ([string], optional)\n$TextBody = [string]\"This is the text body\"\n\n# Splat parameters\n$Parameters = @{\n    \"UseSecureConnectionIfAvailable\" = $UseSecureConnectionIfAvailable\n    \"SMTPServer\"                     = $SMTPServer\n    \"Credential\"                     = $Credential\n    \"Port\"                           = $Port\n    \"From\"                           = $From\n    \"RecipientList\"                  = $RecipientList\n    \"Subject\"                        = $Subject\n    \"TextBody\"                       = $TextBody\n}\n\n# Send message\nSend-MailKitMessage @Parameters<\/code><\/pre>\n<\/li>\n<\/ol>\n<ol class=\"wp-block-list\" start=\"9\">\n<li>PowerShell betikini &ccedil;al\u0131\u015ft\u0131rd\u0131ktan sonra, e-posta al\u0131c\u0131ya g&ouml;nderilir. &Ouml;rne\u011fimizde, e-posta harici bir al\u0131c\u0131ya g&ouml;nderildi.<\/li>\n<\/ol>\n<p><img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a149c15acad_1772177857.png\"><\/p>\n<p>&nbsp;<\/p>\n<ol class=\"wp-block-list\" start=\"10\">\n<li>E-postan\u0131n orijinal mesaj\u0131n\u0131 g&ouml;rd&uuml;\u011f&uuml;n&uuml;zde,&nbsp;<a href=\"https:\/\/o365info.com\/spf-dkim-dmarc-microsoft-365\/\">SPF, DKIM ve DMARC'\u0131n<\/a>&nbsp;<strong>PASS<\/strong> oldu\u011fu g&ouml;steriliyor.<\/li>\n<\/ol>\n<p><img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a149d0e3fe0_1772177872.png\"><\/p>\n<h2 id=\"h-troubleshoot-high-volume-email\" class=\"wp-block-heading\">Y&uuml;ksek Hacimli E-posta Sorun Gider<\/h2>\n<p>PowerShell ile e-posta g&ouml;nderirken a\u015fa\u011f\u0131daki hatay\u0131 al\u0131rsan\u0131z, Microsoft Entra ID'de kimlik do\u011frulaman\u0131n neden ba\u015far\u0131s\u0131z oldu\u011funu kontrol edebilirsiniz. Bunun nedeni, G&uuml;venlik Varsay\u0131lanlar\u0131n\u0131n devre d\u0131\u015f\u0131 b\u0131rak\u0131lmamas\u0131ndan veya HVE hesab\u0131n\u0131n Ko\u015fullu Eri\u015fim politikas\u0131nda d\u0131\u015flanmamas\u0131ndan kaynaklanabilir.<\/p>\n<div class=\"code-toolbar\">\n<pre class=\"wp-block-prismatic-blocks language-powershell\" tabindex=\"0\"><code>535: 5.7.139 Authentication unsuccessful, the organization configuration does not allow this authentication request. Visit\nhttps:\/\/learn.microsoft.com\/en-us\/entra\/identity-platform\/reference-error-codes for more information. Error code: AADSTS530035<\/code><\/pre>\n<div class=\"toolbar\">\n<div class=\"toolbar-item\">&nbsp;<\/div>\n<\/div>\n<\/div>\n<p>Neden hata ald\u0131\u011f\u0131n\u0131z\u0131 veya mesaj\u0131n g&ouml;nderilmemesinin nedenini kontrol etmek i&ccedil;in Microsoft Entra ID kullanmak en iyisidir.<\/p>\n<ol class=\"wp-block-list\">\n<li>Microsoft&nbsp;<a href=\"https:\/\/entra.microsoft.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Entra ID-ye<\/a>&nbsp;oturum a&ccedil;<\/li>\n<li><strong>Kimlik &gt; Monit&ouml;r ve Sa\u011fl\u0131k &gt; Giri\u015f loglar\u0131na<\/strong>&nbsp;t\u0131klay\u0131n<\/li>\n<li><strong>Kullan\u0131c\u0131 giri\u015flerine t\u0131klay\u0131n (etkile\u015fimli)<\/strong><\/li>\n<li>Listeden&nbsp;<strong>Kullan\u0131c\u0131'ya<\/strong>&nbsp;t\u0131klay\u0131n<\/li>\n<li><strong>Temel Bilgiler'e<\/strong>&nbsp;t\u0131klay\u0131n<\/li>\n<li><strong>Durum Ba\u015far\u0131s\u0131zl\u0131\u011f\u0131na<\/strong>&nbsp;Bak\u0131n<\/li>\n<li><strong>Ba\u015far\u0131s\u0131zl\u0131k nedenine<\/strong> bak\u0131n\u0131z<\/li>\n<\/ol>\n<h2 id=\"h-troubleshoot-high-volume-email\" class=\"wp-block-heading\">Y&uuml;ksek Hacimli E-posta Sorun Gider<\/h2>\n<p>PowerShell ile e-posta g&ouml;nderirken a\u015fa\u011f\u0131daki hatay\u0131 al\u0131rsan\u0131z, Microsoft Entra ID'de kimlik do\u011frulaman\u0131n neden ba\u015far\u0131s\u0131z oldu\u011funu kontrol edebilirsiniz. Bunun nedeni, G&uuml;venlik Varsay\u0131lanlar\u0131n\u0131n devre d\u0131\u015f\u0131 b\u0131rak\u0131lmamas\u0131ndan veya HVE hesab\u0131n\u0131n Ko\u015fullu Eri\u015fim politikas\u0131nda d\u0131\u015flanmamas\u0131ndan kaynaklanabilir.<\/p>\n<div class=\"code-toolbar\">\n<pre class=\"wp-block-prismatic-blocks language-powershell\" tabindex=\"0\"><code>535: 5.7.139 Authentication unsuccessful, the organization configuration does not allow this authentication request. Visit\nhttps:\/\/learn.microsoft.com\/en-us\/entra\/identity-platform\/reference-error-codes for more information. Error code: AADSTS530035<\/code><\/pre>\n<div class=\"toolbar\">\n<div class=\"toolbar-item\">&nbsp;<\/div>\n<\/div>\n<\/div>\n<p>Neden hata ald\u0131\u011f\u0131n\u0131z\u0131 veya mesaj\u0131n g&ouml;nderilmemesinin nedenini kontrol etmek i&ccedil;in Microsoft Entra ID kullanmak en iyisidir.<\/p>\n<ol class=\"wp-block-list\">\n<li>Microsoft&nbsp;<a href=\"https:\/\/entra.microsoft.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Entra ID-ye<\/a>&nbsp;oturum a&ccedil;<\/li>\n<li><strong>Kimlik &gt; Monit&ouml;r ve Sa\u011fl\u0131k &gt; Giri\u015f loglar\u0131na<\/strong>&nbsp;t\u0131klay\u0131n<\/li>\n<li><strong>Kullan\u0131c\u0131 giri\u015flerine t\u0131klay\u0131n (etkile\u015fimli)<\/strong><\/li>\n<li>Listeden&nbsp;<strong>Kullan\u0131c\u0131'ya<\/strong>&nbsp;t\u0131klay\u0131n<\/li>\n<li><strong>Temel Bilgiler'e<\/strong>&nbsp;t\u0131klay\u0131n<\/li>\n<li><strong>Durum Ba\u015far\u0131s\u0131zl\u0131\u011f\u0131na<\/strong>&nbsp;Bak\u0131n<\/li>\n<li><strong>Ba\u015far\u0131s\u0131zl\u0131k nedenine<\/strong>&nbsp;bak\u0131n\u0131z<\/li>\n<\/ol>\n<p>&nbsp;<img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a149f104d87_1772177905.png\"><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;8. Her \u015fey do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015fsa, Microsoft Entra ID'de durumun <strong>Ba\u015far\u0131<\/strong> olarak g&ouml;r&uuml;nd&uuml;\u011f&uuml;n&uuml; do\u011frulayabilirsiniz.<\/p>\n<p>&nbsp;<img src=\"..\/..\/..\/uploads\/images\/2026\/02\/69a14a0a1445f_1772177930.png\"><\/p>\n<p>&nbsp;Daha fazlas\u0131: <a href=\"https:\/\/o365info.com\/export-microsoft-365-users-password\/\">Microsoft 365 kullan\u0131c\u0131 \u015fifre raporunu d\u0131\u015fa aktar\u0131n &raquo;<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Microsoft 365'te Y&uuml;ksek Hacimli E-posta'y\u0131 nas\u0131l yap\u0131land\u0131rmak olaca\u011f\u0131n\u0131 &ouml;\u011frendiniz. Kurulu\u015funuz i&ccedil;inde toplu e-posta g&ouml;ndermek i&ccedil;in Exchange y&ouml;netim merkezinde veya PowerShell ile bir HVE hesab\u0131 olu\u015fturman\u0131z gerekir. Sonra, al\u0131c\u0131lara e-posta g&ouml;ndermek i&ccedil;in test etmeye ba\u015flayabilirsiniz.<\/p>\n<p>PowerShell'den b&uuml;y&uuml;k miktarda e-posta g&ouml;ndermek veya test etmek i&ccedil;in m&uuml;kemmel bir y&ouml;ntem, PowerShell'e Send-MailKitMessage mod&uuml;l&uuml;n&uuml; y&uuml;kleyip beti\u011fi kullanmakt\u0131r.<\/p>\n<p>Bu makaleyi be\u011fendin mi? Ayr\u0131ca&nbsp;<a href=\"https:\/\/o365info.com\/smtp-relay-microsoft-365\/\">Microsoft 365'te SMTP r&ouml;lesini nas\u0131l kurars\u0131n\u0131z<\/a> da ho\u015funuza gidebilir. Bizi takip etmeyi ve bu makaleyi payla\u015fmay\u0131 unutmay\u0131n.<\/p>\n<\/div>","excerpt":"Kurulu\u015funuz dahili olarak \u00e7ok say\u0131da e-posta g\u00f6nderirse, bir s\u0131n\u0131rla kar\u015f\u0131la\u015fabilir ve bu da gecikmelere ve sorunlara yol a\u00e7abilir. Microsoft 365'te Y\u00fcksek Hacimli E-posta, bir organizasyonun herhangi bir h\u0131z s\u0131n\u0131r\u0131 olmadan y\u00fcksek hacimlerde dahili ve harici mesaj g\u00f6ndermesini sa\u011flayan bir hizmettir. ","created_at":"2026-02-27 10:31:14","updated_at":"2026-09-23 15:09:57","category_id":6,"view_count":675,"reading_time":9,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-02-27 07:40:19","featured_image":"\/uploads\/images\/2026\/02\/69a14a4725d91_1772177991.png","slug":"microsoft-365-te-yuksek-hacimli-e-posta-nasil-yapilandirilir","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":343,"title":"Azure AD Security Defaults: K\u00fc\u00e7\u00fck ve Orta \u00d6l\u00e7ekli \u0130\u015fletmeler \u0130\u00e7in Kritik G\u00fcvenlik Kalkan\u0131","content":"<p>Bu makalede, Microsoft 365 Y&ouml;netim alan\u0131n\u0131zda&nbsp;<strong>G&uuml;venlik Varsay\u0131lanlar\u0131n\u0131 nas\u0131l etkinle\u015ftirip devre d\u0131\u015f\u0131&nbsp;<\/strong>b\u0131rakaca\u011f\u0131n\u0131z\u0131 g&ouml;sterece\u011fiz. Microsoft 365'teki G&uuml;venlik Varsay\u0131lanlar\u0131,&nbsp;<strong>&ccedil;ok fakt&ouml;rl&uuml; kimlik<\/strong>&nbsp;do\u011frulamay\u0131 uygulayarak ve&nbsp;<strong>eski kimlik do\u011frulama y&ouml;ntemlerini engelleyerek<\/strong> hesap korumas\u0131n\u0131 art\u0131ran &ouml;nceden yap\u0131land\u0131r\u0131lm\u0131\u015f ayarlard\u0131r &ndash; t&uuml;m kullan\u0131c\u0131lar i&ccedil;in temel ve etkili g&uuml;venlik sa\u011flar.<\/p>\n<p>Microsoft Azure Active Directory'nin sundu\u011fu Security Defaults (G&uuml;venlik Varsay\u0131lanlar\u0131) &ouml;zelli\u011fi, modern siber tehdit ortam\u0131nda organizasyonlar\u0131n temel g&uuml;venlik ihtiya&ccedil;lar\u0131n\u0131 kar\u015f\u0131layan kritik bir koruma katman\u0131d\u0131r. &Ouml;zellikle Premium lisanslara sahip olmayan k&uuml;&ccedil;&uuml;k ve orta &ouml;l&ccedil;ekli i\u015fletmeler i&ccedil;in tasarlanan bu &ouml;zellik, ekran\u0131n\u0131zda g&ouml;rd&uuml;\u011f&uuml;n&uuml;z gibi tek bir d&uuml;\u011fmeyle aktifle\u015ftirilebilen, ancak arkas\u0131nda g&uuml;&ccedil;l&uuml; g&uuml;venlik mekanizmalar\u0131 bar\u0131nd\u0131ran bir &ccedil;&ouml;z&uuml;md&uuml;r.<\/p>\n<h2>Security Defaults Nedir ve Neden Kritik?<\/h2>\n<p>G&ouml;rselde dikkat &ccedil;eken k\u0131rm\u0131z\u0131 &ccedil;er&ccedil;eveli alan, organizasyonunuzun g&uuml;venlik durumunu g&ouml;steren en kritik noktad\u0131r. \"Enabled (recommended)\" se&ccedil;ene\u011fi, Microsoft'un t&uuml;m organizasyonlara \u015fiddetle tavsiye etti\u011fi g&uuml;venlik seviyesini temsil eder. E\u011fer bu ayar \"Disabled\" durumundaysa, organizasyonunuz %99.9 oran\u0131nda engellenebilecek g&uuml;venlik tehditlerine kar\u015f\u0131 savunmas\u0131z durumdad\u0131r.<\/p>\n<h3>Microsoft'un \u0130statistiklerine G&ouml;re Kritik Ger&ccedil;ekler<\/h3>\n<p>Microsoft'un g&uuml;venlik raporlar\u0131na g&ouml;re:<\/p>\n<ul>\n<li><strong>%99.9<\/strong> oran\u0131nda hesap g&uuml;venli\u011fi ihlali MFA ile &ouml;nlenebilir<\/li>\n<li><strong>%80<\/strong> oran\u0131nda veri s\u0131z\u0131nt\u0131s\u0131 zay\u0131f veya &ccedil;al\u0131nan kimlik bilgileri nedeniyle ger&ccedil;ekle\u015fir<\/li>\n<li>Legacy authentication kullanan sistemler <strong>%67<\/strong> daha fazla sald\u0131r\u0131ya maruz kal\u0131r<\/li>\n<\/ul>\n<p><a href=\"..\/..\/..\/microsoft-365-icin-guvenlik-varsayilanlarini-nasil-etkinlestirir-veya-devre-disi-birakilir\" target=\"_blank\" rel=\"noopener\">Microsoft 365 i&ccedil;in G&uuml;venlik Varsay\u0131lanlar\u0131n\u0131 Nas\u0131l Etkinle\u015ftirir veya Devre D\u0131\u015f\u0131 B\u0131rak\u0131l\u0131r<\/a><\/p>\n<h2>Security Defaults'un Sa\u011flad\u0131\u011f\u0131 Koruma Katmanlar\u0131<\/h2>\n<h3>1. Evrensel Multi-Factor Authentication (MFA) Zorunlulu\u011fu<\/h3>\n<p>Security Defaults etkinle\u015ftirildi\u011finde, t&uuml;m kullan\u0131c\u0131lar i&ccedil;in MFA zorunlu hale gelir. Bu &ouml;zellik:<\/p>\n<pre><code class=\"language-powershell\"># MFA durumunu kontrol etme scripti\nConnect-MsolService\nGet-MsolUser -All | Select-Object DisplayName, UserPrincipalName, \n    @{Name=\"MFA Status\"; Expression={\n        if($_.StrongAuthenticationRequirements.State){\n            $_.StrongAuthenticationRequirements.State\n        } else {\n            \"Disabled\"\n        }\n    }}\n<\/code><\/pre>\n<p><strong>Uygulama Senaryolar\u0131:<\/strong><\/p>\n<ul>\n<li>\u0130lk 14 g&uuml;n i&ccedil;inde kullan\u0131c\u0131lar MFA kay\u0131t s&uuml;recini tamamlamal\u0131d\u0131r<\/li>\n<li>Azure Portal, Microsoft 365 Admin Center gibi kritik portallara eri\u015fimde an\u0131nda MFA istenir<\/li>\n<li>Kullan\u0131c\u0131 deneyimini bozmadan g&uuml;venlik sa\u011flan\u0131r<\/li>\n<\/ul>\n<h3>2. Y&ouml;netici Hesaplar\u0131 \u0130&ccedil;in Katmanl\u0131 G&uuml;venlik<\/h3>\n<p>Admin hesaplar\u0131 i&ccedil;in &ouml;zel g&uuml;venlik gereksinimleri:<\/p>\n<table>\n<thead>\n<tr>\n<th>Admin Rol&uuml;<\/th>\n<th>MFA Gereksinimi<\/th>\n<th>Ek G&uuml;venlik<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Global Administrator<\/td>\n<td>Her oturumda<\/td>\n<td>Risk tabanl\u0131 eri\u015fim kontrol&uuml;<\/td>\n<\/tr>\n<tr>\n<td>Security Administrator<\/td>\n<td>Her oturumda<\/td>\n<td>Ko\u015fullu eri\u015fim<\/td>\n<\/tr>\n<tr>\n<td>Exchange Administrator<\/td>\n<td>Her oturumda<\/td>\n<td>Privileged Identity Management &ouml;nerisi<\/td>\n<\/tr>\n<tr>\n<td>User Administrator<\/td>\n<td>Her oturumda<\/td>\n<td>Just-in-time eri\u015fim &ouml;nerisi<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>3. Legacy Authentication'\u0131n Tamamen Engellenmesi<\/h3>\n<p>Legacy (Basic) Authentication protokolleri engellendi\u011finde:<\/p>\n<pre><code class=\"language-powershell\"># Legacy authentication kullan\u0131m\u0131n\u0131 tespit etme\n$startDate = (Get-Date).AddDays(-30)\n$endDate = (Get-Date)\n\nSearch-UnifiedAuditLog -StartDate $startDate -EndDate $endDate `\n    -ResultSize 5000 -Operations \"UserLoggedIn\" | \n    Where-Object {$_.AuditData -like \"*ClientInfoString*\"}\n<\/code><\/pre>\n<p><strong>Engellenen Protokoller:<\/strong><\/p>\n<ul>\n<li>POP3<\/li>\n<li>IMAP4<\/li>\n<li>SMTP AUTH<\/li>\n<li>Exchange ActiveSync (EAS)<\/li>\n<li>Exchange Web Services (EWS)<\/li>\n<li>PowerShell without modern auth<\/li>\n<\/ul>\n<h3>4. Riskli Giri\u015flere Kar\u015f\u0131 Otomatik Koruma<\/h3>\n<p>Security Defaults, Azure AD Identity Protection'\u0131n temel &ouml;zelliklerini i&ccedil;erir:<\/p>\n<ul>\n<li><strong>Impossible travel detection<\/strong>: Fiziksel olarak imkans\u0131z lokasyon de\u011fi\u015fiklikleri<\/li>\n<li><strong>Anonymous IP detection<\/strong>: Tor, VPN veya proxy kullan\u0131m\u0131<\/li>\n<li><strong>Malware linked IP<\/strong>: Bilinen k&ouml;t&uuml; ama&ccedil;l\u0131 IP adreslerinden eri\u015fim<\/li>\n<li><strong>Unfamiliar sign-in properties<\/strong>: Al\u0131\u015f\u0131lmad\u0131k cihaz veya lokasyon<\/li>\n<\/ul>\n<h2>Conditional Access vs Security Defaults: Hangisini Se&ccedil;meli?<\/h2>\n<h3>Security Defaults Kullan\u0131m Senaryolar\u0131<\/h3>\n<p>\u2705 <strong>Security Defaults tercih edilmeli:<\/strong><\/p>\n<ul>\n<li>Azure AD Free veya Office 365 lisanslar\u0131 kullan\u0131yorsan\u0131z<\/li>\n<li>500'den az kullan\u0131c\u0131n\u0131z varsa<\/li>\n<li>Basit ama etkili g&uuml;venlik istiyorsan\u0131z<\/li>\n<li>IT ekibiniz s\u0131n\u0131rl\u0131 kaynaklara sahipse<\/li>\n<li>H\u0131zl\u0131 ve kolay implementasyon gerekiyorsa<\/li>\n<\/ul>\n<h3>Conditional Access'e Ge&ccedil;i\u015f Senaryolar\u0131<\/h3>\n<p><strong>Conditional Access tercih edilmeli:<\/strong><\/p>\n<ul>\n<li>Azure AD Premium P1\/P2 lisans\u0131n\u0131z varsa<\/li>\n<li>Gran&uuml;ler kontrol gerekiyorsa<\/li>\n<li>Farkl\u0131 kullan\u0131c\u0131 gruplar\u0131 i&ccedil;in farkl\u0131 politikalar gerekiyorsa<\/li>\n<li>&Ouml;zel uygulamalar i&ccedil;in spesifik kurallar tan\u0131mlamak istiyorsan\u0131z<\/li>\n<\/ul>\n<h2>Security Defaults'tan Conditional Access'e Ge&ccedil;i\u015f Yol Haritas\u0131<\/h2>\n<h3>Ad\u0131m 1: Mevcut Durumu De\u011ferlendirme<\/h3>\n<pre><code class=\"language-powershell\"># Security Defaults durumunu kontrol et\nConnect-AzureAD\n$securityDefaults = Get-AzureADDirectorySettingTemplate | \n    Where-Object {$_.DisplayName -eq \"Security Defaults\"}\n\nif($securityDefaults){\n    Write-Host \"Security Defaults template found\" -ForegroundColor Green\n    $settings = Get-AzureADDirectorySetting | \n        Where-Object {$_.DisplayName -eq \"Security Defaults\"}\n    $settings.Values\n}\n<\/code><\/pre>\n<h3>Ad\u0131m 2: Conditional Access Politikalar\u0131n\u0131 Haz\u0131rlama<\/h3>\n<p>Ge&ccedil;i\u015f &ouml;ncesinde olu\u015fturulmas\u0131 gereken minimum politikalar:<\/p>\n<h4>1. MFA Zorunlulu\u011fu Politikas\u0131<\/h4>\n<pre><code class=\"language-json\">{\n  \"displayName\": \"Require MFA for all users\",\n  \"state\": \"enabled\",\n  \"conditions\": {\n    \"users\": {\n      \"includeUsers\": [\"All\"]\n    },\n    \"applications\": {\n      \"includeApplications\": [\"All\"]\n    }\n  },\n  \"grantControls\": {\n    \"builtInControls\": [\"mfa\"]\n  }\n}\n<\/code><\/pre>\n<h4>2. Legacy Authentication Engelleme<\/h4>\n<pre><code class=\"language-json\">{\n  \"displayName\": \"Block legacy authentication\",\n  \"state\": \"enabled\",\n  \"conditions\": {\n    \"users\": {\n      \"includeUsers\": [\"All\"]\n    },\n    \"clientAppTypes\": [\"exchangeActiveSync\", \"other\"]\n  },\n  \"grantControls\": {\n    \"builtInControls\": [\"block\"]\n  }\n}\n<\/code><\/pre>\n<h4>3. Admin Hesaplar\u0131 \u0130&ccedil;in Ek G&uuml;venlik<\/h4>\n<pre><code class=\"language-powershell\"># Admin hesaplar\u0131 i&ccedil;in Conditional Access politikas\u0131\nNew-AzureADMSConditionalAccessPolicy -DisplayName \"Admins require MFA\" `\n    -State \"Enabled\" `\n    -Conditions @{\n        Users = @{\n            IncludeRoles = @(\n                \"62e90394-69f5-4237-9190-012177145e10\", # Global Admin\n                \"194ae4cb-b126-40b2-bd5b-6091b380977d\"  # Security Admin\n            )\n        }\n        Applications = @{\n            IncludeApplications = \"All\"\n        }\n    } `\n    -GrantControls @{\n        BuiltInControls = @(\"Mfa\", \"CompliantDevice\")\n        Operator = \"OR\"\n    }\n<\/code><\/pre>\n<h3>Ad\u0131m 3: Test ve Pilot Uygulama<\/h3>\n<pre><code class=\"language-powershell\"># Pilot grup olu\u015fturma\n$pilotGroup = New-AzureADGroup -DisplayName \"CA_Pilot_Users\" `\n    -MailEnabled $false `\n    -SecurityEnabled $true `\n    -MailNickName \"CAPilot\"\n\n# Kullan\u0131c\u0131lar\u0131 pilot gruba ekleme\n$testUsers = Get-AzureADUser -Top 10\nforeach($user in $testUsers){\n    Add-AzureADGroupMember -ObjectId $pilotGroup.ObjectId `\n        -RefObjectId $user.ObjectId\n}\n<\/code><\/pre>\n<h3>Ad\u0131m 4: Security Defaults'u Devre D\u0131\u015f\u0131 B\u0131rakma<\/h3>\n<p>\u26a0\ufe0f <strong>UYARI<\/strong>: Bu ad\u0131m sadece t&uuml;m Conditional Access politikalar\u0131 test edildikten sonra yap\u0131lmal\u0131d\u0131r!<\/p>\n<pre><code class=\"language-powershell\"># Security Defaults'u devre d\u0131\u015f\u0131 b\u0131rakma\n$templateId = (Get-AzureADDirectorySettingTemplate | \n    Where-Object {$_.DisplayName -eq \"Security Defaults\"}).Id\n\n$settings = New-Object Microsoft.Open.AzureAD.Model.DirectorySetting\n$settings.DisplayName = \"Security Defaults\"\n$settings[\"IsEnabled\"] = \"false\"\n\nSet-AzureADDirectorySetting -Id $settings.Id -DirectorySetting $settings\n<\/code><\/pre>\n<h2>Risk Tabanl\u0131 Eri\u015fim Politikalar\u0131 Olu\u015fturma<\/h2>\n<h3>Kullan\u0131c\u0131 Risk Politikas\u0131<\/h3>\n<pre><code class=\"language-powershell\"># Y&uuml;ksek riskli kullan\u0131c\u0131lar i&ccedil;in parola s\u0131f\u0131rlama zorunlulu\u011fu\n$userRiskPolicy = @{\n    DisplayName = \"High risk users must reset password\"\n    State = \"Enabled\"\n    Conditions = @{\n        UserRiskLevels = @(\"High\")\n        Users = @{\n            IncludeUsers = \"All\"\n        }\n    }\n    GrantControls = @{\n        BuiltInControls = @(\"PasswordChange\", \"Mfa\")\n        Operator = \"AND\"\n    }\n}\n<\/code><\/pre>\n<h3>Oturum Risk Politikas\u0131<\/h3>\n<pre><code class=\"language-powershell\"># Riskli oturumlar i&ccedil;in MFA zorunlulu\u011fu\n$signInRiskPolicy = @{\n    DisplayName = \"Medium and high risk sign-ins require MFA\"\n    State = \"Enabled\"\n    Conditions = @{\n        SignInRiskLevels = @(\"Medium\", \"High\")\n        Users = @{\n            IncludeUsers = \"All\"\n        }\n    }\n    GrantControls = @{\n        BuiltInControls = @(\"Mfa\")\n    }\n}\n<\/code><\/pre>\n<h2>Password Protection Ayarlar\u0131n\u0131n Optimize Edilmesi<\/h2>\n<h3>Azure AD Password Protection Yap\u0131land\u0131rmas\u0131<\/h3>\n<pre><code class=\"language-powershell\"># &Ouml;zel yasakl\u0131 parola listesi olu\u015fturma\n$bannedPasswords = @(\n    \"Sirket2024\",\n    \"Password123\",\n    \"Admin2024\",\n    \"Ankara06\"\n)\n\n# Custom banned password list g&uuml;ncelleme\nSet-AzureADPasswordProtectionCustomBannedPasswordList `\n    -CustomBannedPasswords $bannedPasswords\n\n# Password protection ayarlar\u0131n\u0131 etkinle\u015ftirme\n$settings = @{\n    EnableBannedPasswordCheck = $true\n    EnableBannedPasswordCheckOnPremises = $true\n    BannedPasswordCheckMode = \"Enforced\"\n}\n<\/code><\/pre>\n<h3>Parola Politikas\u0131 En \u0130yi Uygulamalar\u0131<\/h3>\n<table>\n<thead>\n<tr>\n<th>Politika<\/th>\n<th>&Ouml;nerilen De\u011fer<\/th>\n<th>A&ccedil;\u0131klama<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Minimum uzunluk<\/td>\n<td>12 karakter<\/td>\n<td>NIST 800-63B standard\u0131<\/td>\n<\/tr>\n<tr>\n<td>Karma\u015f\u0131kl\u0131k<\/td>\n<td>Devre d\u0131\u015f\u0131<\/td>\n<td>Uzunluk ve MFA yeterli<\/td>\n<\/tr>\n<tr>\n<td>Ge&ccedil;erlilik s&uuml;resi<\/td>\n<td>S\u0131n\u0131rs\u0131z<\/td>\n<td>Sadece risk durumunda de\u011fi\u015ftir<\/td>\n<\/tr>\n<tr>\n<td>Ge&ccedil;mi\u015f kontrol&uuml;<\/td>\n<td>Son 24 parola<\/td>\n<td>Tekrar kullan\u0131m\u0131 engelle<\/td>\n<\/tr>\n<tr>\n<td>Account lockout<\/td>\n<td>10 deneme<\/td>\n<td>Brute force korumas\u0131<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0130zleme ve Raporlama<\/h2>\n<h3>Sign-in Logs Analizi<\/h3>\n<pre><code class=\"language-powershell\"># Son 7 g&uuml;nl&uuml;k ba\u015far\u0131s\u0131z giri\u015f denemeleri\n$startDate = (Get-Date).AddDays(-7).ToString(\"yyyy-MM-dd\")\n$failedSignIns = Get-AzureADAuditSignInLogs -Filter \"status\/errorCode ne 0 and createdDateTime ge $startDate\"\n\n$failedSignIns | Group-Object UserPrincipalName | \n    Select-Object Name, Count | \n    Sort-Object Count -Descending | \n    Export-Csv \"FailedSignIns_Weekly.csv\"\n<\/code><\/pre>\n<h3>MFA Kullan\u0131m Raporu<\/h3>\n<pre><code class=\"language-powershell\"># MFA registration durumu raporu\nConnect-MgGraph -Scopes \"Reports.Read.All\"\n\n$report = Get-MgReportAuthenticationMethodUserRegistrationDetail\n$report | Select-Object UserPrincipalName, \n    IsMfaCapable, \n    IsMfaRegistered, \n    IsPasswordlessCapable | \n    Export-Excel \"MFA_Status_Report.xlsx\"\n<\/code><\/pre>\n<h2>Kullan\u0131c\u0131 E\u011fitimi ve Change Management<\/h2>\n<h3>Kullan\u0131c\u0131 Bilgilendirme E-posta \u015eablonu<\/h3>\n<pre><code class=\"language-html\">\n\n\n    \n\n\n    <\/code><\/pre>\n<div class=\"container\">\n<div class=\"header\">\n<h2>&Ouml;nemli G&uuml;venlik G&uuml;ncellemesi<\/h2>\n<\/div>\n<div class=\"content\">\n<p>Say\u0131n &Ccedil;al\u0131\u015fan\u0131m\u0131z,<\/p>\n<p>Kurumsal g&uuml;venli\u011fimizi art\u0131rmak i&ccedil;in <strong>Security Defaults<\/strong> &ouml;zelli\u011fini aktifle\u015ftiriyoruz. Bu de\u011fi\u015fiklik <strong>[Tarih]<\/strong> itibar\u0131yla devreye girecektir.<\/p>\n<div class=\"warning\"><strong>\u26a0\ufe0f &Ouml;nemli:<\/strong> T&uuml;m kullan\u0131c\u0131lar i&ccedil;in Multi-Factor Authentication (MFA) zorunlu olacakt\u0131r.<\/div>\n<h3>Yapman\u0131z Gerekenler:<\/h3>\n<div class=\"steps\">\n<ol>\n<li>&nbsp;<\/li>\n<li>Microsoft Authenticator uygulamas\u0131n\u0131 telefonunuza indirin<\/li>\n<li>&nbsp;<\/li>\n<li>aka.ms\/mfasetup adresinden MFA kayd\u0131n\u0131z\u0131 tamamlay\u0131n<\/li>\n<li>&nbsp;<\/li>\n<li>Test giri\u015fi yaparak kurulumun do\u011fru oldu\u011fundan emin olun<\/li>\n<li>&nbsp;<\/li>\n<\/ol>\n<\/div>\n<h3>S\u0131k Sorulan Sorular:<\/h3>\n<ul>\n<li>&nbsp;<\/li>\n<li><strong>MFA her giri\u015fte mi istenecek?<\/strong><br>Hay\u0131r, g&uuml;venilir cihazlarda 14 g&uuml;nde bir istenecektir.<\/li>\n<li>&nbsp;<\/li>\n<li><strong>Telefonum yoksa ne yapmal\u0131y\u0131m?<\/strong><br>IT departman\u0131 ile ileti\u015fime ge&ccedil;erek alternatif y&ouml;ntemler hakk\u0131nda bilgi al\u0131n.<\/li>\n<li>&nbsp;<\/li>\n<\/ul>\n<p>Sorular\u0131n\u0131z i&ccedil;in: it-support@sirket.com<\/p>\n<\/div>\n<\/div>\n<pre><code class=\"language-html\">\n\n\n<\/code><\/pre>\n<h2>Troubleshooting ve Yayg\u0131n Sorunlar<\/h2>\n<h3>Sorun 1: MFA Kayd\u0131 Yapamayan Kullan\u0131c\u0131lar<\/h3>\n<pre><code class=\"language-powershell\"># MFA sorunlu kullan\u0131c\u0131lar\u0131 tespit etme\n$problemUsers = Get-MgUser -All | Where-Object {\n    $_.StrongAuthenticationMethods.Count -eq 0\n}\n\n# Ge&ccedil;ici MFA bypass (sadece acil durumlar i&ccedil;in)\n$user = Get-AzureADUser -ObjectId \"user@domain.com\"\nSet-MsolUser -UserPrincipalName $user.UserPrincipalName `\n    -StrongAuthenticationRequirements @()\n<\/code><\/pre>\n<h3>Sorun 2: Legacy Application Uyumluluk<\/h3>\n<pre><code class=\"language-powershell\"># Legacy authentication kullanan uygulamalar\u0131 tespit etme\n$legacyApps = Search-UnifiedAuditLog -StartDate (Get-Date).AddDays(-30) `\n    -EndDate (Get-Date) -Operations UserLoggedIn -ResultSize 5000 |\n    Where-Object {$_.AuditData -match \"ClientInfoString.*Outlook\/15.0\"}\n\n# App password olu\u015fturma (ge&ccedil;ici &ccedil;&ouml;z&uuml;m)\n# Not: Security Defaults aktifken app password kullan\u0131lamaz\n<\/code><\/pre>\n<h3>Sorun 3: Conditional Access &Ccedil;ak\u0131\u015fmalar\u0131<\/h3>\n<pre><code class=\"language-powershell\"># &Ccedil;ak\u0131\u015fan politikalar\u0131 tespit etme\n$policies = Get-AzureADMSConditionalAccessPolicy\n$conflicts = @()\n\nforeach($policy in $policies){\n    if($policy.State -eq \"Enabled\"){\n        $conflicts += [PSCustomObject]@{\n            PolicyName = $policy.DisplayName\n            Users = $policy.Conditions.Users.IncludeUsers\n            Apps = $policy.Conditions.Applications.IncludeApplications\n            Controls = $policy.GrantControls.BuiltInControls\n        }\n    }\n}\n\n$conflicts | Format-Table -AutoSize\n<\/code><\/pre>\n<h2>Performans Metrikleri ve KPI'lar<\/h2>\n<h3>G&uuml;venlik KPI Dashboard<\/h3>\n<pre><code class=\"language-powershell\"># G&uuml;venlik metrikleri toplama\nfunction Get-SecurityMetrics {\n    $metrics = @{\n        Date = Get-Date\n        TotalUsers = (Get-AzureADUser -All $true).Count\n        MFAEnabledUsers = (Get-MsolUser -All | Where-Object {$_.StrongAuthenticationMethods.Count -gt 0}).Count\n        AdminAccounts = (Get-AzureADDirectoryRole | Get-AzureADDirectoryRoleMember).Count\n        DisabledLegacyAuth = (Get-AzureADPolicy | Where-Object {$_.DisplayName -like \"*Legacy*\"}).Count\n        FailedSignIns24h = (Get-AzureADAuditSignInLogs -Filter \"createdDateTime ge $(Get-Date).AddDays(-1) and status\/errorCode ne 0\").Count\n    }\n    \n    # MFA coverage hesaplama\n    $metrics.MFACoverage = [math]::Round(($metrics.MFAEnabledUsers \/ $metrics.TotalUsers) * 100, 2)\n    \n    return $metrics\n}\n\n# Dashboard HTML olu\u015fturma\n$metrics = Get-SecurityMetrics\n$dashboardHTML = @\"\n\n\n    \n    \n\n\n    <\/code><\/pre>\n<h1>Azure AD Security Dashboard<\/h1>\n<pre><code class=\"language-powershell\">\n    <\/code><\/pre>\n<div class=\"metric-card\">\n<div class=\"metric-value\">$($metrics.MFACoverage)%<\/div>\n<div class=\"metric-label\">MFA Coverage<\/div>\n<\/div>\n<pre><code class=\"language-powershell\">\n    <\/code><\/pre>\n<div class=\"metric-card\">\n<div class=\"metric-value\">$($metrics.FailedSignIns24h)<\/div>\n<div class=\"metric-label\">Failed Sign-ins (24h)<\/div>\n<\/div>\n<pre><code class=\"language-powershell\">\n\n\n\"@\n\n$dashboardHTML | Out-File \"SecurityDashboard.html\"\n<\/code><\/pre>\n<h2>Gelecek Planlama ve Yol Haritas\u0131<\/h2>\n<h3>3 Ayl\u0131k G&uuml;venlik Geli\u015ftirme Plan\u0131<\/h3>\n<p><strong>1. Ay - Temel G&uuml;venlik:<\/strong><\/p>\n<ul>\n<li>\u2705 Security Defaults aktifle\u015ftirme<\/li>\n<li>\u2705 MFA enrollment kampanyas\u0131<\/li>\n<li>\u2705 Legacy authentication envanteri<\/li>\n<\/ul>\n<p><strong>2. Ay - \u0130leri Seviye Koruma:<\/strong><\/p>\n<ul>\n<li>\u2b1c Conditional Access pilot<\/li>\n<li>\u2b1c Risk-based policies<\/li>\n<li>\u2b1c Privileged Identity Management<\/li>\n<\/ul>\n<p><strong>3. Ay - Optimizasyon:<\/strong><\/p>\n<ul>\n<li>\u2b1c Zero Trust modeline ge&ccedil;i\u015f<\/li>\n<li>\u2b1c Passwordless authentication pilot<\/li>\n<li>\u2b1c Advanced threat analytics<\/li>\n<\/ul>\n<h2>Sonu&ccedil; ve &Ouml;neriler<\/h2>\n<p>Security Defaults, Microsoft'un sundu\u011fu &uuml;cretsiz ancak son derece etkili bir g&uuml;venlik &ccedil;&ouml;z&uuml;m&uuml;d&uuml;r. G&ouml;rselinizdeki \"Enabled (recommended)\" se&ccedil;ene\u011fi, organizasyonunuzun g&uuml;venlik duru\u015funu an\u0131nda iyile\u015ftirecek kritik bir ad\u0131md\u0131r.<\/p>\n<p><strong>Acil Aksiyon &Ouml;nerileri:<\/strong><\/p>\n<ol>\n<li><strong>Hemen kontrol edin<\/strong>: Azure Portal'da Security Defaults durumunuzu kontrol edin<\/li>\n<li><strong>Risk de\u011ferlendirmesi yap\u0131n<\/strong>: Legacy application kullan\u0131m\u0131n\u0131z\u0131 tespit edin<\/li>\n<li><strong>Kullan\u0131c\u0131lar\u0131 bilgilendirin<\/strong>: MFA kayd\u0131 i&ccedil;in e\u011fitim materyalleri haz\u0131rlay\u0131n<\/li>\n<li><strong>Test edin<\/strong>: Pilot grupta uygulayarak sorunlar\u0131 &ouml;nceden tespit edin<\/li>\n<li><strong>Aktifle\u015ftirin<\/strong>: T&uuml;m haz\u0131rl\u0131klar tamamland\u0131ktan sonra Security Defaults'u etkinle\u015ftirin<\/li>\n<\/ol>\n<p>Unutmay\u0131n: %99.9 oran\u0131nda hesap g&uuml;venli\u011fi ihlali, Security Defaults ile &ouml;nlenebilir. Bu basit ama g&uuml;&ccedil;l&uuml; &ouml;zelli\u011fi kullanmamak, organizasyonunuzu gereksiz risklere maruz b\u0131rakmak anlam\u0131na gelir.<\/p>\n<hr>\n<p><em>Bu makale, Azure AD Security Defaults ve Conditional Access &ouml;zellikleri i&ccedil;in haz\u0131rlanm\u0131\u015ft\u0131r. T&uuml;m PowerShell scriptleri test ortam\u0131nda denenmelidir.<\/em><\/p>","excerpt":"Bu makalede, Microsoft 365 Y\u00f6netim alan\u0131n\u0131zda\u00a0G\u00fcvenlik Varsay\u0131lanlar\u0131n\u0131 nas\u0131l etkinle\u015ftirip devre d\u0131\u015f\u0131\u00a0b\u0131rakaca\u011f\u0131n\u0131z\u0131 g\u00f6sterece\u011fiz","created_at":"2025-11-25 19:39:35","updated_at":"2026-09-23 11:26:08","category_id":6,"view_count":492,"reading_time":10,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-11-25 16:39:00","featured_image":"a226c400d55cb75185ac75e15292feb6.png","slug":"azure-ad-security-defaults-kucuk-ve-orta-olcekli-isletmeler-icin-kritik-guvenlik-kalkani","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":70,"title":"Microsoft 365 Defender'daki Live Response \u00f6zelli\u011fi","content":"Microsoft 365 Defender'daki\u00a0<strong>Canl\u0131 Yan\u0131t (Live Response)<\/strong> \u00f6zelli\u011fi, U\u00e7 Nokta i\u00e7in Microsoft Defender (MDE) ve Microsoft U\u00e7 Nokta Veri Kayb\u0131 \u00d6nleme (MEIDP) taraf\u0131ndan i\u015flenen ve izlenen olaylar\u0131 belirlemede kullan\u0131\u015fl\u0131 bir ara\u00e7t\u0131r. \u0130\u015fte bu olaylar\u0131 tespit etmek i\u00e7in <strong>Live Response <\/strong>kullan\u0131m\u0131; <h3><strong>Canl\u0131 Yan\u0131t ile \u0130\u015flenen Olaylar\u0131 Belirleme Y\u00f6ntemleri<\/strong><\/h3> <h4><strong>a) \u0130\u015flem Merkezi (Action Center) \u0130ncelemesi<\/strong><\/h4> <ul> <li> <p ><strong>M365 Defender Portal<\/strong>\u00a0&gt;\u00a0<strong>\u0130\u015flem Merkezi<\/strong>\u2019nde denetlenmi\u015f Canl\u0131 Yan\u0131t komutlar\u0131n\u0131 ve y\u00fcr\u00fct\u00fclen i\u015flemleri g\u00f6r\u00fcnt\u00fcleyebilirsiniz.<\/p> <\/li> <li> <p >Burada, MDE ve MEIDP'nin hangi olaylar\u0131 i\u015fledi\u011fine dair ge\u00e7mi\u015f komut g\u00fcnl\u00fckleri ve eylemler listelenir.<\/p> <\/li> <\/ul> <h4><strong>b) MDE API Kullan\u0131m\u0131<\/strong><\/h4> <p ><strong>MDE API<\/strong>\u00a0ile makine eylemlerini ve Canl\u0131 Yan\u0131t isteklerini sorgulayarak i\u015flenen olaylar\u0131n kapsaml\u0131 bir listesini alabilirsiniz.<\/p> \u00d6rne\u011fin: <pre  data-enlighter-language=\"generic\">GET https:\/\/api.securitycenter.microsoft.com\/api\/machineactions<\/pre> <p >API yan\u0131tlar\u0131, hangi olaylar\u0131n i\u015flendi\u011fine dair detaylar i\u00e7erir (\u00f6rne\u011fin, vir\u00fcsten koruma taramalar\u0131, DLP ihlalleri).<\/p> <h4><strong>Canl\u0131 Yan\u0131t Komut Dosyalar\u0131 ile Log Toplama<\/strong><\/h4> <ul> <li> <p >Canl\u0131 Yan\u0131t oturumunda a\u015fa\u011f\u0131daki komutlarla belirli olay g\u00fcnl\u00fcklerini toplayabilirsiniz:<\/p> <ul> <li> <p ><strong><code>Get-MpThreatDetection<\/code><\/strong>: Defender Vir\u00fcsten Koruma tehdit kay\u0131tlar\u0131n\u0131 listeler.<\/p> <\/li> <li> <p ><strong><code>Get-WinEvent -LogName \"Microsoft-Windows-Windows Defender\/Operational\"<\/code><\/strong>: Defender g\u00fcnl\u00fcklerini \u00e7eker.<\/p> <\/li> <li> <p ><strong><code>Get-WinEvent -LogName \"Microsoft-Windows-DLP\/Operational\"<\/code><\/strong>: MEIDP olaylar\u0131n\u0131 kontrol eder.<\/p> <\/li> <li> <p ><strong><code>Get-NetEventPacketCapture<\/code><\/strong>: A\u011f izleme verilerini g\u00f6r\u00fcnt\u00fcler.<\/p> <\/li> <\/ul> <\/li> <\/ul> <h3><strong>MDE ve MEIDP Taraf\u0131ndan \u0130\u015flenen Olay T\u00fcrleri<\/strong><\/h3> <p >A\u015fa\u011f\u0131daki olaylar genellikle MDE ve MEIDP taraf\u0131ndan otomatik olarak i\u015flenir ve Canl\u0131 Yan\u0131t ile sorgulanabilir:<\/p> <h4><strong>\u00a0Sens\u00f6r &amp; Cihaz Sa\u011fl\u0131\u011f\u0131 Kay\u0131tlar\u0131<\/strong><\/h4> <ul> <li> <p >Cihaz\u0131n MDE'ye ba\u011flant\u0131 durumu, sinyal kay\u0131plar\u0131, sens\u00f6r hatalar\u0131.<\/p> <\/li> <\/ul> <h4><strong>\u00a0Microsoft Defender Vir\u00fcsten Koruma G\u00fcnl\u00fckleri<\/strong><\/h4> <ul> <li> <p >K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m tespitleri, engellenen tehditler, tarama sonu\u00e7lar\u0131.<\/p> <\/li> <\/ul> <h4><strong>\u00a0Veri Kayb\u0131 \u00d6nleme (DLP) Olaylar\u0131<\/strong><\/h4> <ul> <li> <p >Hassas veri s\u0131z\u0131nt\u0131lar\u0131, politik ihlaller, \u015fifrelenmemi\u015f veri transferleri.<\/p> <\/li> <\/ul> <h4><strong>\u00a0A\u011f ve Windows Filtre Platformu (WFP) Kay\u0131tlar\u0131<\/strong><\/h4> <ul> <li> <p >\u015e\u00fcpheli a\u011f ba\u011flant\u0131lar\u0131, engellenen trafik, g\u00fcvenlik duvar\u0131 kurallar\u0131 ihlalleri.<\/p> <\/li> <\/ul> <h4><strong>\u00a0Di\u011fer Windows Olaylar\u0131<\/strong><\/h4> <ul> <li> <p ><strong>Process Creation (4688)<\/strong>: \u015e\u00fcpheli i\u015flem ba\u015flatmalar\u0131.<\/p> <\/li> <li> <p ><strong>PowerShell Script Block Logging (4104)<\/strong>: K\u00f6t\u00fc ama\u00e7l\u0131 komut dosyas\u0131 \u00e7al\u0131\u015ft\u0131rma giri\u015fimleri.<\/p> <\/li> <li> <p ><strong>Registry Modifications<\/strong>: Kritik kay\u0131t defteri de\u011fi\u015fiklikleri.<\/p> <\/li> <\/ul> <h3><strong>Microsoft Sentinel Entegrasyonu<\/strong><\/h3> <ul> <li> <p ><strong>Sentinel'de MDE ve MEIDP olaylar\u0131n\u0131<\/strong>\u00a0<code>SecurityAlert<\/code>\u00a0veya\u00a0<code>DeviceEvents<\/code>\u00a0tablolar\u0131ndan sorgulayarak merkezi izleme yapabilirsiniz.<\/p> <\/li> <\/ul> <pre  data-enlighter-language=\"generic\">SecurityAlert | where ProviderName contains \"Microsoft Defender\" | summarize count() by AlertName<\/pre> <p ><strong>Not: G\u00fcnl\u00fck Saklama S\u00fcreleri<\/strong>: Canl\u0131 Yan\u0131t ile toplanan verilerin saklama s\u00fcresi, Microsoft 365 lisans\u0131n\u0131za g\u00f6re de\u011fi\u015fir (\u00f6rne\u011fin, E5'te 30 g\u00fcn).Canl\u0131 Yan\u0131t, MDE ve MEIDP'nin i\u015fledi\u011fi olaylar\u0131\u00a0<strong>ger\u00e7ek zamanl\u0131<\/strong>\u00a0olarak incelemek i\u00e7in g\u00fc\u00e7l\u00fc bir ara\u00e7t\u0131r. \u0130\u015flem Merkezi, API sorgular\u0131 ve \u00f6zel komut dosyalar\u0131 ile kapsaml\u0131 bir izleme sa\u011flayabilirsiniz. Kurulumunuza \u00f6zg\u00fc detaylar i\u00e7in\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/microsoft-365\/security\/\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Docs<\/a>\u2019u kontrol etmeniz \u00f6nerilir.<\/p>","excerpt":"Microsoft 365 Defender'daki\u00a0Canl\u0131 Yan\u0131t (Live Response) \u00f6zelli\u011fi, U\u00e7 Nokta i\u00e7in Microsoft Defender (MDE) ve Microsoft U\u00e7 Nokta Veri Kayb\u0131...","created_at":"2025-05-03 10:30:40","updated_at":"2026-09-07 09:02:50","category_id":7,"view_count":822,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-05-03 10:30:40","featured_image":"resimyok.jpg","slug":"microsoft-365-defenderdaki-live-response-ozelligi","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"},{"id":83,"title":"Microsoft 365\u2019te Posta Kutusu \u0130\u00e7eri\u011fine Legal Hold Uygulamak","content":"B\u00fcy\u00fck organizasyonlarda yasal gereklilikler do\u011frultusunda posta kutusu i\u00e7eriklerinin korunmas\u0131 (\u00f6rne\u011fin, dava s\u00fcre\u00e7lerinde kan\u0131t olarak tutulmas\u0131) hayati \u00f6neme sahiptir. Microsoft 365 ortamlar\u0131nda bu t\u00fcr i\u015flemler i\u00e7in uygun rollerin atanmas\u0131, hem <strong>uyumlulu\u011fu<\/strong> hem de <strong>g\u00fcvenli\u011fi<\/strong> sa\u011flar. Bu yaz\u0131da, <strong>G\u00fcvenlik ve Uyumluluk Merkezi (Security &amp; Compliance Center)<\/strong> i\u00e7inde yer alan eDiscovery Y\u00f6neticisi (<strong>eDiscovery Manager<\/strong>) rol\u00fcn\u00fcn neden posta kutusu i\u00e7eri\u011fine yasal tutuklama uygulamak i\u00e7in en uygun rol oldu\u011fu detayl\u0131ca a\u00e7\u0131klanacak. <strong>eDiscovery Y\u00f6neticisi Rol\u00fc Nedir?<\/strong> eDiscovery Y\u00f6neticisi, Microsoft 365 ortam\u0131nda <strong>eDiscovery<\/strong>\u00a0 s\u00fcre\u00e7lerini y\u00f6netmek i\u00e7in tasarlanm\u0131\u015f \u00f6zel bir rold\u00fcr. Bu rol, a\u015fa\u011f\u0131daki yetkileri i\u00e7erir: <strong>Legal Hold<\/strong>: Posta kutular\u0131, SharePoint siteleri veya Teams sohbetleri gibi kaynaklardaki verilerin silinmesini engeller. <strong>eDiscovery Durumlar\u0131 Olu\u015fturma<\/strong>: Dava veya denetim s\u00fcre\u00e7lerinde kan\u0131t olarak kullan\u0131lacak verileri tan\u0131mlamak ve korumak i\u00e7in durumlar olu\u015fturur. <strong>Arama ve Geri D\u00f6n\u00fc\u015f\u00fcm<\/strong>: Belirli kritere g\u00f6re i\u00e7erikleri arar ve analiz eder. <strong>\u0130\u00e7erik Koruma<\/strong>: Verilerin do\u011frudan eri\u015fim olmadan korunmas\u0131n\u0131 sa\u011flar. Bu rol, <strong>Microsoft Purview Uyumluluk Portal\u0131<\/strong>\u00a0 \u00fczerinden atan\u0131r ve kullan\u0131c\u0131lar\u0131n posta kutusu i\u00e7eri\u011fini do\u011frudan g\u00f6r\u00fcnt\u00fclemeden, sadece\u00a0 <strong>koruma ve arama yetkileri<\/strong>\u00a0 sa\u011flar. <strong>Neden eDiscovery Y\u00f6neticisi Rol\u00fc Tercih Edilmelidir?<\/strong> Bu rol\u00fcn tercih edilmesinin temel gerek\u00e7eleri \u015funlard\u0131r: <strong>\u00a0Yasal Tutuklama Yetkisi<\/strong> - eDiscovery Y\u00f6neticisi,<strong> posta kutular\u0131<\/strong>, SharePoint siteleri, OneDrive hesaplar\u0131 gibi kaynaklara <strong>yasal tutuklama uygulama<\/strong> yetkisine sahiptir. - Bu yetki, dava s\u00fcre\u00e7lerinde verilerin silinmesini engeller ve <strong>E-Discovery Durumu (Case)<\/strong> \u00fczerinden y\u00f6netilir. <strong>Merkezi Y\u00f6netimi Sa\u011flar<\/strong> - Microsoft Purview Uyumluluk Portal\u0131, t\u00fcm uyumluluk i\u015flemlerinin (tutuklama, arama, raporlama) merkezi olarak yap\u0131ld\u0131\u011f\u0131 bir platformdur. - eDiscovery Y\u00f6neticisi rol\u00fc, bu portal \u00fczerinden t\u00fcm i\u015flemleri tek bir arabirimden y\u00f6netir. <strong>En Az Ayr\u0131cal\u0131k \u0130lkesi (Principle of Least Privilege)<\/strong> - Rol, sadece gerekli yetkileri\u00a0 i\u00e7erir. \u00d6rne\u011fin, posta kutusu i\u00e7eri\u011fini g\u00f6r\u00fcnt\u00fcleme yetkisi yoktur, sadece\u00a0 <strong>koruma ve arama izinleri<\/strong> verilir. - Bu, g\u00fcvenli\u011fi art\u0131r\u0131r ve yetki k\u00f6t\u00fcye kullan\u0131m riskini azalt\u0131r. <strong>Dava ve Denetim S\u00fcre\u00e7lerini Kolayla\u015ft\u0131r\u0131r<\/strong> - eDiscovery Y\u00f6neticisi,\u00a0 <strong>litigation hold<\/strong>\u00a0 \u00a0ve\u00a0<strong> eDiscovery Durumlar\u0131<\/strong>\u00a0 olu\u015fturabilir. - Bu durumlar, belirli kullan\u0131c\u0131lara veya t\u00fcm organizasyona uygulanabilir. <strong>\u0130\u00e7erik Eri\u015fimi Olmadan Koruma<\/strong> - Rol, posta kutusu i\u00e7eri\u011fine do\u011frudan eri\u015fim izni vermez. Kullan\u0131c\u0131lar, verileri <strong>arama veya tutuklama<\/strong>\u00a0yapabilir ancak i\u00e7eriklerin kendisini g\u00f6remez. - Bu, gizlilik ve uyumluluk standartlar\u0131na uygunlu\u011fu sa\u011flar. <strong>Di\u011fer Rollerin S\u0131n\u0131rl\u0131l\u0131klar\u0131<\/strong> Di\u011fer roller bu senaryo i\u00e7in **gereksiz yetkiler** sunar veya **eksik i\u015flevler** i\u00e7erir: <div > <div > <table > <thead > <tr > <th  scope=\"col\"> <div ><strong>Rol<\/strong><\/div><\/th> <th  scope=\"col\"> <div ><strong>Yetkiler<\/strong><\/div><\/th> <th  scope=\"col\"> <div ><strong>S\u0131n\u0131rl\u0131l\u0131klar<\/strong><\/div><\/th> <\/tr> <\/thead> <tbody> <tr > <td > <div ><strong>Exchange Y\u00f6neticisi (Exchange Admin)<\/strong><\/div><\/td> <td > <div >Posta kutular\u0131, mailler, kurallar vb. t\u00fcm Exchange nesnelerine tam eri\u015fim.<\/div><\/td> <td > <div >A\u015f\u0131r\u0131 yetkilendirme riski (\u00f6rne\u011fin, i\u00e7erik silme veya de\u011fi\u015ftirme).<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Uyumluluk Y\u00f6netimi (Compliance Management)<\/strong><\/div><\/td> <td > <div >Temel uyumluluk ayarlar\u0131n\u0131 y\u00f6netme.<\/div><\/td> <td > <div >Yasal tutuklama veya eDiscovery durumu olu\u015fturma yetkisi yok.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Azure AD Uyumluluk Veri Y\u00f6neticisi (Compliance Data Administrator)<\/strong><\/div><\/td> <td > <div >Uyumluluk verilerine eri\u015fim.<\/div><\/td> <td > <div >Posta kutusu tutuklamas\u0131 i\u00e7in gerekli yetkileri i\u00e7ermez.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>T\u00fcm Yetkiler (Full Access)<\/strong><\/div><\/td> <td > <div >Organizasyon genelinde t\u00fcm rollerin birle\u015fimi.<\/div><\/td> <td > <div >G\u00fcvenlik a\u00e7\u0131klar\u0131<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div> <\/div> <strong>\u00a0eDiscovery Y\u00f6neticisi Rol\u00fc Atama Ad\u0131mlar\u0131<\/strong> Microsoft Purview Uyumluluk Portal\u0131 \u00fczerinden rol atamas\u0131 \u015fu \u015fekilde yap\u0131l\u0131r: Portal\u2019a Giri\u015f Yap\u0131n 1. (https:\/\/compliance.microsoft.com) adresine <a href=\"https:\/\/compliance.microsoft.com\">gidin<\/a>. 2. Global Admin veya Uyumluluk Y\u00f6neticisi (Compliance Administrator) hesab\u0131yla giri\u015f yap\u0131n. <strong>Rol Atamas\u0131n\u0131 Yap\u0131land\u0131r\u0131n<\/strong> 1. Sol men\u00fcden **\"Kurulum\" &gt; \"Roller\" se\u00e7ene\u011fine gidin. 2.\"eDiscovery Y\u00f6neticisi\" rol\u00fcn\u00fc se\u00e7in ve\"Kullan\u0131c\u0131 Ekle\" butonuna t\u0131klay\u0131n. 3. Uyumluluk ekibi \u00fcyelerini veya gruplar\u0131 se\u00e7in ve Kaydet . <strong>\u00a0eDiscovery Durumu Olu\u015fturun<\/strong> 1. Sol men\u00fcden\u00a0 \"eDiscovery\" &gt; \"Standart\"\u00a0 se\u00e7ene\u011fine gidin. 2. \"Yeni Durum\" butonuna t\u0131klayarak bir dava durumu olu\u015fturun. 3. Duruma ad verin ve\u00a0 \"Kullan\u0131c\u0131lar Ekle\"\u00a0 ile hedef posta kutular\u0131n\u0131 belirleyin. 4.<strong data-spm-anchor->litigation hold\u00a0<\/strong> sekmesinden <strong>apply<\/strong> <strong data-spm-anchor->litigation hold <\/strong>se\u00e7ene\u011fini etkinle\u015ftirin. -\u00a0 Yetki Kontrol\u00fc:\u00a0 Rol atamas\u0131ndan sonra kullan\u0131c\u0131lar\u0131n sadece gerekli yetkileri kulland\u0131\u011f\u0131n\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irin. - Denetim Loglar\u0131n\u0131 \u0130zleyin:\u00a0 Microsoft Purview portal\u0131nda **Denetim G\u00fcnl\u00fckleri (Audit Logs)** \u00fczerinden yap\u0131lan t\u00fcm tutuklama ve arama i\u015flemlerini izleyin. -\u00a0 Belgeleme: er durumun amac\u0131, tarihleri ve ilgili ki\u015fileri hakk\u0131nda bilgi tutun. -\u00a0 Test Ortam\u0131nda Deneyin: \u00dcretim ortam\u0131na uygulamadan \u00f6nce test durumlar\u0131 olu\u015fturarak i\u015flemlerin etkisini kontrol edin. <div > <strong>Troubleshooting \/ Sorun giderme:<\/strong> <\/div> <div > <div > <table > <thead > <tr > <th  scope=\"col\"> <div ><strong>Soru<\/strong><\/div><\/th> <th  scope=\"col\"> <div ><strong>\u00c7\u00f6z\u00fcm<\/strong><\/div><\/th> <\/tr> <\/thead> <tbody> <tr > <td > <div ><strong>Rol Atand\u0131 Ancak legal-hold Uygulanm\u0131yor Mu?<\/strong><\/div><\/td> <td > <div >Kullan\u0131c\u0131n\u0131n Microsoft Purview portal\u0131nda do\u011fru duruma eri\u015fim izni oldu\u011fundan emin olun.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Posta Kutusu legal-hold Uygulanm\u0131yor Mu?<\/strong><\/div><\/td> <td > <div >Exchange Online\u2019da<strong>\"Mailbox Retention Policy\"<\/strong>ayarlar\u0131n\u0131 kontrol edin.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Arama Sonu\u00e7lar\u0131 Bo\u015f Mu?<\/strong><\/div><\/td> <td  data-spm-anchor-> <div >Arama kriterlerini do\u011frulay\u0131n (\u00f6rne\u011fin, tarih aral\u0131\u011f\u0131, anahtar kelimeler).<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div> <\/div> Microsoft 365 ortamlar\u0131nda posta kutusu i\u00e7eriklerine yasal tutuklama uygulamak i\u00e7in e<strong>Discovery Y\u00f6neticisi rol\u00fc<\/strong>, en uygun ve g\u00fcvenli se\u00e7enekken, di\u011fer roller ya gereksiz yetkiler sunar ya da eksik i\u015flevler i\u00e7erir. Bu rol,\u00a0 <strong>merkezi y\u00f6netim<\/strong> ,\u00a0 <strong>en az ayr\u0131cal\u0131k prensibi<\/strong> ve <strong>dava s\u00fcre\u00e7lerini destekleyen yetkiler<\/strong>\u00a0 gibi kritik avantajlar\u0131 sunar. eDiscovery durumlar\u0131n\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irin ve art\u0131k gerekli olmayan <strong data-spm-anchor->Legal Hold <\/strong>kald\u0131rarak veri maliyetlerini azalt\u0131n.Microsoft 365\u2019ta yasal tutuklama i\u015flemlerini \u00f6\u011frenmek isteyen BT y\u00f6neticileri ve uyumluluk ekipleri i\u00e7in rehber niteli\u011findedir. Sorular\u0131n\u0131z\u0131 veya deneyimlerinizi yorumlarda payla\u015fmaktan \u00e7ekinmeyin!","excerpt":"B\u00fcy\u00fck organizasyonlarda yasal gereklilikler do\u011frultusunda posta kutusu i\u00e7eriklerinin korunmas\u0131 (\u00f6rne\u011fin, dava s\u00fcre\u00e7lerinde kan\u0131t olarak...","created_at":"2025-05-01 12:47:26","updated_at":"2026-09-23 14:01:26","category_id":8,"view_count":716,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-05-01 12:47:26","featured_image":"resimyok.jpg","slug":"microsoft-365te-legal-hold","category_name":"Active Directory \/Azure","category_slug":"active-directory-azure","category_color":"#f59e0b"},{"id":124,"title":"Microsoft Entra ID'de MFA Durumunu Kontrol Etme","content":"\u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (MFA), g\u00fcn\u00fcm\u00fcz\u00fcn siber g\u00fcvenlik ortam\u0131nda kritik \u00f6neme sahip bir g\u00fcvenlik katman\u0131d\u0131r. Microsoft Entra ID (eski ad\u0131yla Azure AD) kullanan organizasyonlarda, hangi kullan\u0131c\u0131lar\u0131n MFA korumas\u0131na sahip oldu\u011funu ve kimlerin bu korumadan yoksun oldu\u011funu bilmek, g\u00fcvenlik y\u00f6neticileri i\u00e7in son derece \u00f6nemlidir. Bu kapsaml\u0131 rehber, Microsoft Entra ID'de MFA durumunu \u00e7e\u015fitli y\u00f6ntemlerle nas\u0131l kontrol edebilece\u011finizi ve raporlayabilece\u011finizi ad\u0131m ad\u0131m a\u00e7\u0131klamaktad\u0131r. <h2>\u0130\u00e7indekiler<\/h2> <ol> <li>Giri\u015f ve MFA'n\u0131n \u00d6nemi<\/li> <li>Microsoft Entra ID'de MFA Durumu Kontrol Y\u00f6ntemleri <ul> <li>Portal \u00dczerinden Kontrol<\/li> <li>PowerShell ile MFA Durumu Kontrol\u00fc<\/li> <li>Microsoft Graph API ile Sorgulama<\/li> <\/ul> <\/li> <li>MFA Raporlar\u0131 Olu\u015fturma <ul> <li>Temel MFA Durumu Raporu<\/li> <li>Detayl\u0131 MFA Raporu<\/li> <li>Ko\u015fullu Eri\u015fim Tabanl\u0131 MFA Raporu<\/li> <\/ul> <\/li> <li>MFA Durumunu De\u011ferlendirme ve Analiz<\/li> <li>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/li> <li>\u0130yi Uygulama \u00d6rnekleri ve \u00d6neriler<\/li> <li>Sonu\u00e7<\/li> <\/ol> <h2>Giri\u015f ve MFA'n\u0131n \u00d6nemi<\/h2> \u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (MFA), kullan\u0131c\u0131n\u0131n kimli\u011fini do\u011frulamak i\u00e7in en az iki farkl\u0131 do\u011frulama y\u00f6ntemi gerektiren bir g\u00fcvenlik s\u00fcreci olup, genellikle \"bildi\u011finiz bir \u015fey\" (parola), \"sahip oldu\u011funuz bir \u015fey\" (mobil cihaz veya g\u00fcvenlik anahtar\u0131) ve \"oldu\u011funuz bir \u015fey\" (biyometrik) kategorilerinden gelen fakt\u00f6rleri birle\u015ftirir. <h3>MFA Neden Bu Kadar \u00d6nemlidir?<\/h3> Microsoft'un ara\u015ft\u0131rmalar\u0131na g\u00f6re, MFA kullan\u0131m\u0131 hesap ele ge\u00e7irme sald\u0131r\u0131lar\u0131n\u0131 <strong>%99.9 oran\u0131nda<\/strong> azaltabilmektedir. Bu, siber sald\u0131r\u0131lara kar\u015f\u0131 en etkili savunma mekanizmalar\u0131ndan biridir. \u00d6zellikle: <ul> <li>Kimlik bilgisi h\u0131rs\u0131zl\u0131\u011f\u0131 sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar<\/li> <li>Veri ihlali riskini azalt\u0131r<\/li> <li>Fidye yaz\u0131l\u0131m\u0131 ve di\u011fer zararl\u0131 yaz\u0131l\u0131m sald\u0131r\u0131lar\u0131n\u0131 engellemeye yard\u0131mc\u0131 olur<\/li> <li>D\u00fczenleyici gereksinimlere uyumu destekler (GDPR, HIPAA, vb.)<\/li> <\/ul> <h3>Microsoft Entra ID'de MFA Yap\u0131land\u0131rma T\u00fcrleri<\/h3> Microsoft Entra ID'de MFA'y\u0131 \u00fc\u00e7 farkl\u0131 \u015fekilde yap\u0131land\u0131rabilirsiniz: <ol> <li><strong>Kullan\u0131c\u0131 Ba\u015f\u0131na MFA<\/strong>: Her kullan\u0131c\u0131ya do\u011frudan uygulanan, eski y\u00f6ntem<\/li> <li><strong>Ko\u015fullu Eri\u015fim Politikas\u0131 Tabanl\u0131 MFA<\/strong>: Belirli ko\u015fullara g\u00f6re MFA gerektirmenize olanak tan\u0131yan modern yakla\u015f\u0131m<\/li> <li><strong>G\u00fcvenlik Varsay\u0131lanlar\u0131<\/strong>: T\u00fcm kullan\u0131c\u0131lar i\u00e7in MFA gerektiren otomatik bir politika<\/li> <\/ol> Bu rehberde, her bir yap\u0131land\u0131rma t\u00fcr\u00fcn\u00fcn MFA durumunu nas\u0131l kontrol edece\u011fimizi inceleyece\u011fiz. <h2>Microsoft Entra ID'de MFA Durumu Kontrol Y\u00f6ntemleri<\/h2> <h3>Portal \u00dczerinden Kontrol<\/h3> <h4>1. Kullan\u0131c\u0131 Ba\u015f\u0131na MFA Durumunu Kontrol Etme<\/h4> Bu y\u00f6ntem, kullan\u0131c\u0131 ba\u015f\u0131na yap\u0131land\u0131r\u0131lan eski MFA y\u00f6nteminin durumunu kontrol etmek i\u00e7in kullan\u0131l\u0131r: <ol> <li><a href=\"https:\/\/entra.microsoft.com\/\">Microsoft Entra Y\u00f6netim Merkezi<\/a>'ne gidin ve y\u00f6netici olarak oturum a\u00e7\u0131n<\/li> <li>Sol men\u00fcden <strong>Kimlik<\/strong> &gt; <strong>Kullan\u0131c\u0131lar<\/strong> &gt; <strong>T\u00fcm kullan\u0131c\u0131lar<\/strong> se\u00e7ene\u011fine t\u0131klay\u0131n<\/li> <li>\u00dcst men\u00fcden <strong>\u00c7ok fakt\u00f6rl\u00fc kimlik do\u011frulama<\/strong>'ya t\u0131klay\u0131n (Bu se\u00e7enek g\u00f6r\u00fcnm\u00fcyorsa, sa\u011f \u00fcst k\u00f6\u015fedeki \"Eski portal g\u00f6r\u00fcn\u00fcm\u00fc\" se\u00e7ene\u011fine t\u0131klay\u0131n)<\/li> <li>A\u00e7\u0131lan sayfada t\u00fcm kullan\u0131c\u0131lar\u0131n MFA durumunu g\u00f6receksiniz: <ul> <li><strong>Devre D\u0131\u015f\u0131<\/strong>: MFA yap\u0131land\u0131r\u0131lmam\u0131\u015f<\/li> <li><strong>Etkin<\/strong>: MFA yap\u0131land\u0131r\u0131lm\u0131\u015f ama hen\u00fcz kaydedilmemi\u015f<\/li> <li><strong>Zorunlu<\/strong>: MFA tam olarak yap\u0131land\u0131r\u0131lm\u0131\u015f ve kullan\u0131mda<\/li> <\/ul> <\/li> <\/ol> <h4>2. Ko\u015fullu Eri\u015fim Tabanl\u0131 MFA'y\u0131 Kontrol Etme<\/h4> Ko\u015fullu eri\u015fim politikalar\u0131 arac\u0131l\u0131\u011f\u0131yla uygulanan MFA durumunu kontrol etmek i\u00e7in: <ol> <li><a href=\"https:\/\/entra.microsoft.com\/\">Microsoft Entra Y\u00f6netim Merkezi<\/a>'ne gidin<\/li> <li>Sol men\u00fcden <strong>Koruma<\/strong> &gt; <strong>Ko\u015fullu Eri\u015fim<\/strong> &gt; <strong>Politikalar<\/strong>'a t\u0131klay\u0131n<\/li> <li>Mevcut politikalar\u0131n\u0131z\u0131 g\u00f6zden ge\u00e7irin ve MFA gerektiren politikalar\u0131 inceleyin<\/li> <li>Her politika i\u00e7in <strong>Kullan\u0131c\u0131lar ve gruplar<\/strong> b\u00f6l\u00fcm\u00fcnde kimler i\u00e7in MFA yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6rebilirsiniz<\/li> <\/ol> <h4>3. G\u00fcvenlik Varsay\u0131lanlar\u0131n\u0131 Kontrol Etme<\/h4> G\u00fcvenlik varsay\u0131lanlar\u0131n\u0131n durumunu kontrol etmek i\u00e7in: <ol> <li><a href=\"https:\/\/entra.microsoft.com\/\">Microsoft Entra Y\u00f6netim Merkezi<\/a>'ne gidin<\/li> <li>Sol men\u00fcden <strong>Koruma<\/strong> &gt; <strong>G\u00fcvenlik varsay\u0131lanlar\u0131<\/strong>'na t\u0131klay\u0131n<\/li> <li>G\u00fcvenlik varsay\u0131lanlar\u0131n\u0131n <strong>Etkin<\/strong>, <strong>Devre d\u0131\u015f\u0131<\/strong> veya <strong>Yaln\u0131zca raporlama modunda<\/strong> olup olmad\u0131\u011f\u0131n\u0131 kontrol edin<\/li> <\/ol> <h3>PowerShell ile MFA Durumu Kontrol\u00fc<\/h3> PowerShell kullanarak MFA durumunu kontrol etmek, \u00f6zellikle b\u00fcy\u00fck kurulu\u015flarda daha verimli ve otomatize edilebilir bir y\u00f6ntemdir. <h4>1. Temel MFA Durumu Kontrol\u00fc<\/h4> A\u015fa\u011f\u0131daki PowerShell beti\u011fi, t\u00fcm kullan\u0131c\u0131lar\u0131n temel MFA durumunu kontrol eder: <pre><code ><\/code><\/pre> <pre  data-enlighter-language=\"python\"># MSOnline mod\u00fcl\u00fcn\u00fc y\u00fckleyin (e\u011fer y\u00fckl\u00fc de\u011filse) if (-not (Get-Module -ListAvailable -Name MSOnline)) { Install-Module -Name MSOnline -Force -AllowClobber } # Microsoft Entra ID'ye ba\u011flan\u0131n Connect-MsolService # T\u00fcm kullan\u0131c\u0131lar\u0131n MFA durumunu al\u0131n $users = Get-MsolUser -All | Select-Object DisplayName, UserPrincipalName, @{ Name = \"MFA Durumu\"; Expression = { if ($_.StrongAuthenticationRequirements.State -ne $null) { $_.StrongAuthenticationRequirements.State } else { \"Devre D\u0131\u015f\u0131\" } } } # Sonu\u00e7lar\u0131 g\u00f6r\u00fcnt\u00fcleyin $users | Format-Table -AutoSize # CSV olarak d\u0131\u015fa aktar\u0131n $users | Export-Csv -Path \"MFA_Durumu_$(Get-Date -Format 'yyyyMMdd').csv\" -NoTypeInformation -Encoding UTF8<\/pre> <pre><code ><\/code><\/pre> &nbsp; <pre><code ><\/code><\/pre> <h4>2. Detayl\u0131 MFA Durumu ve Kay\u0131t Bilgileri<\/h4> Daha detayl\u0131 bir MFA durumu raporu i\u00e7in, kullan\u0131c\u0131lar\u0131n kay\u0131tl\u0131 kimlik do\u011frulama y\u00f6ntemlerini de kontrol edebilirsiniz: <pre><code ><\/code><\/pre> <pre  data-enlighter-language=\"python\"># Microsoft.Graph.Identity.SignIns mod\u00fcl\u00fcn\u00fc y\u00fckleyin if (-not (Get-Module -ListAvailable -Name Microsoft.Graph.Identity.SignIns)) { Install-Module Microsoft.Graph.Identity.SignIns -Force } # Microsoft Graph'e ba\u011flan\u0131n Connect-MgGraph -Scopes \"User.Read.All\", \"UserAuthenticationMethod.Read.All\" # T\u00fcm kullan\u0131c\u0131lar\u0131 al\u0131n $users = Get-MgUser -All -Property DisplayName, UserPrincipalName, Id $userAuthMethods = @() foreach ($user in $users) { # Kullan\u0131c\u0131n\u0131n kimlik do\u011frulama y\u00f6ntemlerini al $authMethods = Get-MgUserAuthenticationMethod -UserId $user.Id # MFA y\u00f6ntemlerini say $authenticatorApp = ($authMethods | Where-Object { $_.AdditionalProperties -eq \"#microsoft.graph.microsoftAuthenticatorAuthenticationMethod\" }).Count $phoneAuth = ($authMethods | Where-Object { $_.AdditionalProperties -eq \"#microsoft.graph.phoneAuthenticationMethod\" }).Count $fido2Key = ($authMethods | Where-Object { $_.AdditionalProperties -eq \"#microsoft.graph.fido2AuthenticationMethod\" }).Count $softwareTotp = ($authMethods | Where-Object { $_.AdditionalProperties -eq \"#microsoft.graph.softwareOathAuthenticationMethod\" }).Count # MFA durumunu belirle $mfaStatus = if (($authenticatorApp + $phoneAuth + $fido2Key + $softwareTotp) -gt 0) { \"Etkin\" } else { \"Devre D\u0131\u015f\u0131\" } # Sonu\u00e7 nesnesini olu\u015ftur $userAuthMethods += @{ DisplayName = $user.DisplayName UserPrincipalName = $user.UserPrincipalName MFADurumu = $mfaStatus MicrosoftAuthenticator = $authenticatorApp -gt 0 TelefonDo\u011frulama = $phoneAuth -gt 0 FIDO2G\u00fcvenlikAnahtar\u0131 = $fido2Key -gt 0 Yaz\u0131l\u0131mTOTP = $softwareTotp -gt 0 Kay\u0131tl\u0131Y\u00f6ntemSay\u0131s\u0131 = ($authenticatorApp + $phoneAuth + $fido2Key + $softwareTotp) } } # Sonu\u00e7lar\u0131 g\u00f6r\u00fcnt\u00fcle $userAuthMethods | Format-Table -AutoSize # CSV olarak d\u0131\u015fa aktar $userAuthMethods | Export-Csv -Path \"Detayl\u0131_MFA_Raporu_$(Get-Date -Format 'yyyyMMdd').csv\" -NoTypeInformation -Encoding UTF8<\/pre> <pre><code ><\/code><\/pre> &nbsp; <pre><code ><\/code><\/pre> <h3>Microsoft Graph API ile Sorgulama<\/h3> Microsoft Graph API, programatik olarak MFA durumunu sorgulamak i\u00e7in kullan\u0131labilir. Bu, \u00f6zellikle \u00f6zel dashboard veya raporlama ara\u00e7lar\u0131 olu\u015fturmak istiyorsan\u0131z faydal\u0131d\u0131r. Temel bir Graph API sorgusu \u00f6rne\u011fi: <pre><code >GET https:\/\/graph.microsoft.com\/v1.0\/users?$select=displayName,userPrincipalName,id <\/code><\/pre> Ard\u0131ndan her kullan\u0131c\u0131 i\u00e7in kimlik do\u011frulama y\u00f6ntemlerini sorgulayabilirsiniz: <pre><code >GET https:\/\/graph.microsoft.com\/v1.0\/users\/{userId}\/authentication\/methods <\/code><\/pre> <h2>MFA Raporlar\u0131 Olu\u015fturma<\/h2> <h3>Temel MFA Durumu Raporu<\/h3> A\u015fa\u011f\u0131daki PowerShell beti\u011fi, t\u00fcm kullan\u0131c\u0131lar\u0131n MFA durumunu i\u00e7eren temel bir rapor olu\u015fturur: <pre><code ><\/code><\/pre> <pre  data-enlighter-language=\"python\"># Gerekli mod\u00fclleri i\u00e7e aktar Import-Module MSOnline # Ba\u011flan Connect-MsolService # MFA durumunu al $report = @() Get-MsolUser -All | ForEach-Object { $user = $_ $mfaMethods = $user.StrongAuthenticationMethods $mfaEnabled = $user.StrongAuthenticationRequirements.Count -gt 0 $defaultMethod = ($mfaMethods | Where-Object { $_.IsDefault -eq $true }).MethodType $report += @{ Kullan\u0131c\u0131 = $user.DisplayName UPN = $user.UserPrincipalName MFADurumu = if ($mfaEnabled) { \"Etkin\" } else { \"Devre D\u0131\u015f\u0131\" } Varsay\u0131lanY\u00f6ntem = if ($defaultMethod) { $defaultMethod } else { \"Yok\" } Kay\u0131tl\u0131Y\u00f6ntemSay\u0131s\u0131 = $mfaMethods.Count SonGiri\u015fTarihi = $user.LastPasswordChangeTimestamp } } # Sonu\u00e7lar\u0131 g\u00f6r\u00fcnt\u00fcle ve d\u0131\u015fa aktar $report | Format-Table -AutoSize $report | Export-Csv -Path \"MFA_Durum_Raporu.csv\" -NoTypeInformation -Encoding UTF8<\/pre> <pre><code ><\/code><\/pre> &nbsp; <pre><code ><\/code><\/pre> <h3>Detayl\u0131 MFA Raporu<\/h3> Daha kapsaml\u0131 bir MFA raporu i\u00e7in, a\u015fa\u011f\u0131daki daha geli\u015fmi\u015f beti\u011fi kullanabilirsiniz: <pre><code ><\/code><\/pre> <pre  data-enlighter-language=\"python\"># Microsoft Graph mod\u00fcllerini i\u00e7e aktar Import-Module Microsoft.Graph.Authentication Import-Module Microsoft.Graph.Identity.SignIns Import-Module Microsoft.Graph.Users # Microsoft Graph'e ba\u011flan Connect-MgGraph -Scopes \"User.Read.All\", \"UserAuthenticationMethod.Read.All\", \"Directory.Read.All\" # Kullan\u0131c\u0131lar\u0131 al $users = Get-MgUser -All -Property DisplayName, UserPrincipalName, Id, AccountEnabled, AssignedLicenses $detailedReport = @() foreach ($user in $users) { # Yaln\u0131zca etkin hesaplar i\u00e7in if ($user.AccountEnabled) { # Kullan\u0131c\u0131n\u0131n kimlik do\u011frulama y\u00f6ntemlerini al $authMethods = Get-MgUserAuthenticationMethod -UserId $user.Id # Kay\u0131tl\u0131 y\u00f6ntemleri belirle $methodTypes = @() $mfaCapable = $false foreach ($method in $authMethods) { $oDataType = $method.AdditionalProperties switch ($oDataType) { \"#microsoft.graph.microsoftAuthenticatorAuthenticationMethod\" { $methodTypes += \"Microsoft Authenticator\" $mfaCapable = $true } \"#microsoft.graph.phoneAuthenticationMethod\" { $methodTypes += \"Telefon\" $mfaCapable = $true } \"#microsoft.graph.passwordAuthenticationMethod\" { $methodTypes += \"Parola\" } \"#microsoft.graph.fido2AuthenticationMethod\" { $methodTypes += \"FIDO2 G\u00fcvenlik Anahtar\u0131\" $mfaCapable = $true } \"#microsoft.graph.softwareOathAuthenticationMethod\" { $methodTypes += \"Yaz\u0131l\u0131m TOTP\" $mfaCapable = $true } \"#microsoft.graph.windowsHelloForBusinessAuthenticationMethod\" { $methodTypes += \"Windows Hello for Business\" $mfaCapable = $true } \"#microsoft.graph.emailAuthenticationMethod\" { $methodTypes += \"E-posta\" $mfaCapable = $true } } } # Y\u00f6ntemler i\u00e7in konsolide edilmi\u015f bir dize olu\u015ftur $methodsString = if ($methodTypes.Count -gt 0) { $methodTypes -join \", \" } else { \"Yok\" } # Kullan\u0131c\u0131 t\u00fcr\u00fcn\u00fc belirle $isMember = $null -ne ($user.AssignedLicenses) -and $user.AssignedLicenses.Count -gt 0 # Rapor nesnesini olu\u015ftur $detailedReport += @{ DisplayName = $user.DisplayName UserPrincipalName = $user.UserPrincipalName MFADurumu = if ($mfaCapable) { \"Etkin\" } else { \"Devre D\u0131\u015f\u0131\" } Kay\u0131tl\u0131Y\u00f6ntemler = $methodsString Y\u00f6ntemSay\u0131s\u0131 = $methodTypes.Count Kullan\u0131c\u0131T\u00fcr\u00fc = if ($isMember) { \"Lisansl\u0131 Kullan\u0131c\u0131\" } else { \"Misafir\/Lisanss\u0131z\" } } } } # Sonu\u00e7lar\u0131 g\u00f6r\u00fcnt\u00fcle $detailedReport | Format-Table -AutoSize # CSV olarak d\u0131\u015fa aktar $detailedReport | Export-Csv -Path \"Detayl\u0131_MFA_Raporu_$(Get-Date -Format 'yyyyMMdd').csv\" -NoTypeInformation -Encoding UTF8<\/pre> <pre><code ><\/code><\/pre> &nbsp; <pre><code ><\/code><\/pre> <h3>Ko\u015fullu Eri\u015fim Tabanl\u0131 MFA Raporu<\/h3> Ko\u015fullu eri\u015fim tabanl\u0131 MFA konfig\u00fcrasyonlar\u0131 i\u00e7in a\u015fa\u011f\u0131daki beti\u011fi kullanabilirsiniz: <pre><code ><\/code><\/pre> <pre  data-enlighter-language=\"python\"># Microsoft Graph mod\u00fcllerini i\u00e7e aktar Import-Module Microsoft.Graph.Authentication Import-Module Microsoft.Graph.Identity.SignIns # Microsoft Graph'e ba\u011flan Connect-MgGraph -Scopes \"Policy.Read.All\", \"Directory.Read.All\" # Ko\u015fullu eri\u015fim politikalar\u0131n\u0131 al $policies = Get-MgIdentityConditionalAccessPolicy # MFA gerektiren politikalar\u0131 filtrele $mfaPolicies = $policies | Where-Object { $_.State -eq \"enabled\" -and ($_.GrantControls.BuiltInControls -contains \"mfa\" -or $_.GrantControls.TermsOfUse -ne $null -or $_.GrantControls.AuthenticationStrength.Id -ne $null) } $caReport = @() foreach ($policy in $mfaPolicies) { # Politika kapsam\u0131ndaki kullan\u0131c\u0131lar\u0131 belirle $includeUsers = if ($policy.Conditions.Users.IncludeUsers -contains \"All\") { \"T\u00fcm kullan\u0131c\u0131lar\" } elseif ($policy.Conditions.Users.IncludeUsers.Count -gt 0) { \"Se\u00e7ili kullan\u0131c\u0131lar: $($policy.Conditions.Users.IncludeUsers.Count)\" } elseif ($policy.Conditions.Users.IncludeGroups.Count -gt 0) { \"Se\u00e7ili gruplar: $($policy.Conditions.Users.IncludeGroups.Count)\" } elseif ($policy.Conditions.Users.IncludeRoles.Count -gt 0) { \"Se\u00e7ili roller: $($policy.Conditions.Users.IncludeRoles.Count)\" } else { \"Belirtilmemi\u015f\" } # Hari\u00e7 tutulan kullan\u0131c\u0131lar\u0131 belirle $excludeUsers = if ($policy.Conditions.Users.ExcludeUsers.Count -gt 0 -or $policy.Conditions.Users.ExcludeGroups.Count -gt 0 -or $policy.Conditions.Users.ExcludeRoles.Count -gt 0) { \"Evet\" } else { \"Hay\u0131r\" } # Do\u011frulama t\u00fcr\u00fcn\u00fc belirle $authType = if ($policy.GrantControls.BuiltInControls -contains \"mfa\") { \"Standart MFA\" } elseif ($policy.GrantControls.AuthenticationStrength.Id -ne $null) { \"Kimlik Do\u011frulama G\u00fcc\u00fc\" } else { \"Di\u011fer\" } # Rapor nesnesini olu\u015ftur $caReport += @{ PolitikaAd\u0131 = $policy.DisplayName PolitikaDurumu = $policy.State DahilKullan\u0131c\u0131lar = $includeUsers Hari\u00e7TutulanKullan\u0131c\u0131lar = $excludeUsers MFAT\u00fcr\u00fc = $authType UygulamalarKapsam\u0131 = if ($policy.Conditions.Applications.IncludeApplications -contains \"All\") { \"T\u00fcm uygulamalar\" } else { \"Se\u00e7ili uygulamalar\" } Olu\u015fturmaTarihi = $policy.CreatedDateTime SonG\u00fcncellemeTarihi = $policy.ModifiedDateTime } } # Sonu\u00e7lar\u0131 g\u00f6r\u00fcnt\u00fcle $caReport | Format-Table -AutoSize # CSV olarak d\u0131\u015fa aktar $caReport | Export-Csv -Path \"Ko\u015fullu_Eri\u015fim_MFA_Raporu_$(Get-Date -Format 'yyyyMMdd').csv\" -NoTypeInformation -Encoding UTF8<\/pre> <pre><code ><\/code><\/pre> &nbsp; <pre><code ><\/code><\/pre> <h2>MFA Durumunu De\u011ferlendirme ve Analiz<\/h2> MFA raporlar\u0131n\u0131z\u0131 olu\u015fturduktan sonra, organizasyonunuzun g\u00fcvenlik durumunu de\u011ferlendirmek i\u00e7in \u015fu analizleri yapabilirsiniz: <h3>1. MFA Benimseme Oran\u0131<\/h3> Toplam kullan\u0131c\u0131 say\u0131n\u0131z\u0131n y\u00fczde ka\u00e7\u0131n\u0131n MFA kullanmaya ba\u015flad\u0131\u011f\u0131n\u0131 hesaplay\u0131n: <pre><code ><\/code><\/pre> <pre  data-enlighter-language=\"python\">$totalUsers = $detailedReport.Count $mfaEnabledUsers = ($detailedReport | Where-Object { $_.MFADurumu -eq \"Etkin\" }).Count $mfaAdoptionRate = ::Round(($mfaEnabledUsers \/ $totalUsers) * 100, 2) Write-Host \"MFA Benimseme Oran\u0131: $mfaAdoptionRate%\" Write-Host \"Toplam Kullan\u0131c\u0131: $totalUsers\" Write-Host \"MFA Etkinle\u015ftirilmi\u015f Kullan\u0131c\u0131: $mfaEnabledUsers\" Write-Host \"MFA Etkinle\u015ftirilmemi\u015f Kullan\u0131c\u0131: $($totalUsers - $mfaEnabledUsers)\"<\/pre> <pre><code ><\/code><\/pre> &nbsp; <pre><code ><\/code><\/pre> <h3>2. MFA Y\u00f6ntem Da\u011f\u0131l\u0131m\u0131<\/h3> Kullan\u0131c\u0131lar\u0131n hangi MFA y\u00f6ntemlerini tercih etti\u011fini analiz edin: <pre><code ><\/code><\/pre> <pre  data-enlighter-language=\"python\">$authenticatorUsers = ($detailedReport | Where-Object { $_.Kay\u0131tl\u0131Y\u00f6ntemler -like \"*Microsoft Authenticator*\" }).Count $phoneUsers = ($detailedReport | Where-Object { $_.Kay\u0131tl\u0131Y\u00f6ntemler -like \"*Telefon*\" }).Count $fido2Users = ($detailedReport | Where-Object { $_.Kay\u0131tl\u0131Y\u00f6ntemler -like \"*FIDO2*\" }).Count $windowsHelloUsers = ($detailedReport | Where-Object { $_.Kay\u0131tl\u0131Y\u00f6ntemler -like \"*Windows Hello*\" }).Count Write-Host \"Microsoft Authenticator Kullan\u0131c\u0131lar\u0131: $authenticatorUsers\" Write-Host \"Telefon Do\u011frulama Kullan\u0131c\u0131lar\u0131: $phoneUsers\" Write-Host \"FIDO2 G\u00fcvenlik Anahtar\u0131 Kullan\u0131c\u0131lar\u0131: $fido2Users\" Write-Host \"Windows Hello for Business Kullan\u0131c\u0131lar\u0131: $windowsHelloUsers\"<\/pre> <pre><code ><\/code><\/pre> &nbsp; <pre><code ><\/code><\/pre> <h3>3. Departman Bazl\u0131 MFA Uyum Analizi<\/h3> Departmanlar (veya i\u015f birimleri) aras\u0131nda MFA uyum oranlar\u0131n\u0131 kar\u015f\u0131la\u015ft\u0131r\u0131n: <pre><code ><\/code><\/pre> <pre  data-enlighter-language=\"python\"># Departman bilgisini i\u00e7eren kullan\u0131c\u0131 listesi $departmentUsers = Get-MgUser -All -Property DisplayName, UserPrincipalName, Department, Id # Departman bazl\u0131 analiz $departmentReport = @() $departments = $departmentUsers | Select-Object -ExpandProperty Department -Unique | Where-Object { $_ -ne $null -and $_ -ne \"\" } foreach ($dept in $departments) { $deptUsers = $departmentUsers | Where-Object { $_.Department -eq $dept } $deptUserCount = $deptUsers.Count $deptMfaUsers = 0 foreach ($user in $deptUsers) { $mfaStatus = $detailedReport | Where-Object { $_.UserPrincipalName -eq $user.UserPrincipalName } | Select-Object -ExpandProperty MFADurumu if ($mfaStatus -eq \"Etkin\") { $deptMfaUsers++ } } $deptMfaRate = if ($deptUserCount -gt 0) { ::Round(($deptMfaUsers \/ $deptUserCount) * 100, 2) } else { 0 } $departmentReport += @{ Departman = $dept ToplamKullan\u0131c\u0131 = $deptUserCount MFAEtkinKullan\u0131c\u0131 = $deptMfaUsers MFAUyumOran\u0131 = \"$deptMfaRate%\" } } # Sonu\u00e7lar\u0131 g\u00f6r\u00fcnt\u00fcle $departmentReport | Sort-Object -Property MFAUyumOran\u0131 -Descending | Format-Table -AutoSize # CSV olarak d\u0131\u015fa aktar $departmentReport | Export-Csv -Path \"Departman_MFA_Raporu_$(Get-Date -Format 'yyyyMMdd').csv\" -NoTypeInformation -Encoding UTF8<\/pre> <pre><code ><\/code><\/pre> &nbsp; <pre><code ><\/code><\/pre> <h2>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h2> <h3>Sorun 1: MFA Durumu Raporlar\u0131 Do\u011fru G\u00f6r\u00fcnm\u00fcyor<\/h3> <strong>Belirtiler<\/strong>: Ko\u015fullu eri\u015fim politikalar\u0131 ile MFA uygulanan kullan\u0131c\u0131lar, raporlarda \"Devre D\u0131\u015f\u0131\" olarak g\u00f6r\u00fcn\u00fcyor. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ul> <li>Kullan\u0131c\u0131 ba\u015f\u0131na MFA yap\u0131land\u0131rmas\u0131 ve ko\u015fullu eri\u015fim tabanl\u0131 MFA farkl\u0131 sistemlerde takip edilir<\/li> <li>Her iki y\u00f6ntemi de raporlar\u0131n\u0131zda dikkate al\u0131n<\/li> <li>Kullan\u0131c\u0131 ba\u015f\u0131na MFA durumunu PowerShell ile kontrol ederken, ko\u015fullu eri\u015fim politikalar\u0131n\u0131 da ayr\u0131ca kontrol edin<\/li> <\/ul> <h3>Sorun 2: PowerShell Komutlar\u0131 \u0130zin Hatas\u0131 Veriyor<\/h3> <strong>Belirtiler<\/strong>: PowerShell betikleri \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda \"Yeterli izniniz yok\" hatas\u0131 al\u0131n\u0131yor. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ul> <li>Global Y\u00f6netici veya G\u00fcvenlik Y\u00f6neticisi rol\u00fcne sahip bir hesapla oturum a\u00e7\u0131n<\/li> <li>Microsoft Graph API izinlerini do\u011fru \u015fekilde isteyin: <pre><code >Connect-MgGraph -Scopes \"User.Read.All\", \"UserAuthenticationMethod.Read.All\", \"Directory.Read.All\", \"Policy.Read.All\" <\/code><\/pre> <\/li> <li>Uygulaman\u0131z i\u00e7in gerekli API izinlerini Azure Portal'dan atay\u0131n<\/li> <\/ul> <h3>Sorun 3: Baz\u0131 Kullan\u0131c\u0131lar MFA'y\u0131 Kaydettikleri Halde Raporlarda G\u00f6r\u00fcnm\u00fcyor<\/h3> <strong>Belirtiler<\/strong>: Baz\u0131 kullan\u0131c\u0131lar MFA kay\u0131t i\u015flemini tamamlad\u0131klar\u0131n\u0131 bildiriyor, ancak raporlarda hala MFA's\u0131z g\u00f6r\u00fcn\u00fcyorlar. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ul> <li>MFA kay\u0131t durumunun g\u00fcncelle\u015ftirilmesi bazen 24 saate kadar s\u00fcrebilir<\/li> <li>Kullan\u0131c\u0131n\u0131n kay\u0131t i\u015flemini do\u011fru tamamlad\u0131\u011f\u0131ndan emin olun<\/li> <li>Azure AD'nin \u00f6nbelle\u011fi nedeniyle raporlar\u0131n gecikmeli olabilece\u011fini hesaba kat\u0131n<\/li> <li>Kullan\u0131c\u0131n\u0131n kayd\u0131n\u0131n onaylanmas\u0131 i\u00e7in oturum a\u00e7ma kay\u0131tlar\u0131n\u0131 kontrol edin<\/li> <\/ul> <h2>\u0130yi Uygulama \u00d6rnekleri ve \u00d6neriler<\/h2> <h3>1. MFA Denetim ve Uyum Stratejisi<\/h3> Organizasyonunuzda MFA'y\u0131 etkin bir \u015fekilde y\u00f6netmek i\u00e7in bir denetim ve uyum stratejisi olu\u015fturun: <ul> <li>Haftal\u0131k veya ayl\u0131k MFA durum raporlar\u0131 olu\u015fturun<\/li> <li>MFA kullanmayan kullan\u0131c\u0131lar\u0131 d\u00fczenli olarak izleyin<\/li> <li>Departman y\u00f6neticilerine MFA uyum raporlar\u0131 g\u00f6nderin<\/li> <li>MFA kullanmayan kullan\u0131c\u0131lar i\u00e7in otomatik e-posta hat\u0131rlat\u0131c\u0131lar ayarlay\u0131n<\/li> <li>\u00a0Y\u00fcksek ayr\u0131cal\u0131kl\u0131 hesaplar\u0131 kontrol et<\/li> <\/ul> <h3> Microsoft Power BI kullanarak etkile\u015fimli bir MFA izleme paneli olu\u015fturabilirsiniz:<\/h3> 1. Yukar\u0131daki PowerShell betiklerini kullanarak d\u00fczenli olarak CSV raporlar\u0131 olu\u015fturun 2. Power BI Desktop'\u0131 a\u00e7\u0131n ve \"Veri Al\" &gt; \"Metin\/CSV\" se\u00e7ene\u011fini kullanarak CSV dosyas\u0131n\u0131 i\u00e7e aktar\u0131n 3. A\u015fa\u011f\u0131daki g\u00f6rselleri i\u00e7eren bir dashboard olu\u015fturun: - MFA benimseme oran\u0131n\u0131 g\u00f6steren bir g\u00f6sterge (gauge) - Departman bazl\u0131 MFA uyumunu g\u00f6steren bir \u00e7ubuk grafik - MFA y\u00f6ntem da\u011f\u0131l\u0131m\u0131n\u0131 g\u00f6steren bir pasta grafik - MFA etkin olmayan kullan\u0131c\u0131lar\u0131 g\u00f6steren bir tablo - Zamana g\u00f6re MFA benimseme e\u011filimini g\u00f6steren bir \u00e7izgi grafik 4. Power BI raporunu programl\u0131 olarak yenilemek i\u00e7in Power BI Gateway yap\u0131land\u0131r\u0131n 5. Raporu Power BI Service'de yay\u0131nlay\u0131n ve payla\u015f\u0131n ### 4. MFA G\u00fcvenlik A\u00e7\u0131klar\u0131 ve Risk De\u011ferlendirmesi MFA yap\u0131land\u0131rman\u0131zdaki potansiyel g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tan\u0131mlamak i\u00e7in: 1. Y\u00fcksek ayr\u0131cal\u0131kl\u0131 hesaplar\u0131n MFA durumunu \u00f6ncelikli olarak izleyin: &nbsp; <pre  data-enlighter-language=\"generic\">$adminRoles = @( \"Global Administrator\", \"Privileged Role Administrator\", \"User Administrator\", \"SharePoint Administrator\", \"Exchange Administrator\", \"Conditional Access Administrator\", \"Security Administrator\" ) # Rol \u00fcyelerini ve MFA durumlar\u0131n\u0131 al $privilegedUsers = @() foreach ($role in $adminRoles) { $roleUsers = Get-MgDirectoryRole -Filter \"DisplayName eq '$role'\" | Get-MgDirectoryRoleMember | Where-Object { $_.AdditionalProperties -eq \"#microsoft.graph.user\" } foreach ($user in $roleUsers) { $userId = $user.Id $userObj = Get-MgUser -UserId $userId # MFA durumunu kontrol et $authMethods = Get-MgUserAuthenticationMethod -UserId $userId $mfaEnabled = ($authMethods | Where-Object { $_.AdditionalProperties -ne \"#microsoft.graph.passwordAuthenticationMethod\" }).Count -gt 0 $privilegedUsers += @{ Kullan\u0131c\u0131Ad\u0131 = $userObj.DisplayName Kullan\u0131c\u0131PrincipalName = $userObj.UserPrincipalName Rol = $role MFADurumu = if ($mfaEnabled) { \"Etkin\" } else { \"Devre D\u0131\u015f\u0131\" } RiskSeviyesi = if ($mfaEnabled) { \"D\u00fc\u015f\u00fck\" } else { \"Y\u00fcksek\" } } } } # Sonu\u00e7lar\u0131 g\u00f6r\u00fcnt\u00fcle $privilegedUsers | Format-Table -AutoSize # CSV olarak d\u0131\u015fa aktar $privilegedUsers | Export-Csv -Path \"Yetkili_Kullan\u0131c\u0131lar_MFA_Raporu_$(Get-Date -Format 'yyyyMMdd').csv\" -NoTypeInformation -Encoding UTF8<\/pre> <h2>G\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 ve risk de\u011ferlendirme raporunu olu\u015fturun:<\/h2> <pre  data-enlighter-language=\"python\"># MFA g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 de\u011ferlendir $vulnReport = @{ Y\u00fcksekRiskliY\u00f6neticiler = ($privilegedUsers | Where-Object { $_.MFADurumu -eq \"Devre D\u0131\u015f\u0131\" }).Count ToplamY\u00f6neticiSay\u0131s\u0131 = $privilegedUsers.Count D\u00fc\u015f\u00fckG\u00fcvenlikliMFAY\u00f6ntemleri = ($detailedReport | Where-Object { $_.Kay\u0131tl\u0131Y\u00f6ntemler -like \"*SMS*\" -or $_.Kay\u0131tl\u0131Y\u00f6ntemler -like \"*Telefon*\" }).Count KonsolideRiskPuan\u0131 = 0 # Hesaplanacak } # Risk puan\u0131 hesapla (0-100 aras\u0131nda, 100 en riskli) $adminRiskWeight = 40 # Y\u00f6netici MFA eksikli\u011fi a\u011f\u0131rl\u0131\u011f\u0131 $userRiskWeight = 30 # Genel kullan\u0131c\u0131 MFA eksikli\u011fi a\u011f\u0131rl\u0131\u011f\u0131 $methodRiskWeight = 30 # D\u00fc\u015f\u00fck g\u00fcvenlikli MFA y\u00f6ntemi a\u011f\u0131rl\u0131\u011f\u0131 $adminRiskScore = if ($vulnReport.ToplamY\u00f6neticiSay\u0131s\u0131 -gt 0) { ($vulnReport.Y\u00fcksekRiskliY\u00f6neticiler \/ $vulnReport.ToplamY\u00f6neticiSay\u0131s\u0131) * $adminRiskWeight } else { 0 } $userRiskScore = if ($totalUsers -gt 0) { (($totalUsers - $mfaEnabledUsers) \/ $totalUsers) * $userRiskWeight } else { 0 } $methodRiskScore = if ($mfaEnabledUsers -gt 0) { ($vulnReport.D\u00fc\u015f\u00fckG\u00fcvenlikliMFAY\u00f6ntemleri \/ $mfaEnabledUsers) * $methodRiskWeight } else { 0 } $vulnReport.KonsolideRiskPuan\u0131 = ::Round($adminRiskScore + $userRiskScore + $methodRiskScore, 2) # Sonu\u00e7lar\u0131 g\u00f6r\u00fcnt\u00fcle $vulnReport | Format-Table -AutoSize # Risk de\u011ferlendirmesi \u00f6zeti $riskLevel = switch ($vulnReport.KonsolideRiskPuan\u0131) { {$_ -lt 20} { \"\u00c7ok D\u00fc\u015f\u00fck Risk\" } {$_ -lt 40} { \"D\u00fc\u015f\u00fck Risk\" } {$_ -lt 60} { \"Orta Risk\" } {$_ -lt 80} { \"Y\u00fcksek Risk\" } default { \"\u00c7ok Y\u00fcksek Risk\" } } Write-Host \"MFA Risk De\u011ferlendirmesi: $riskLevel ($($vulnReport.KonsolideRiskPuan\u0131)\/100)\" -ForegroundColor $( switch ($riskLevel) { \"\u00c7ok D\u00fc\u015f\u00fck Risk\" { \"Green\" } \"D\u00fc\u015f\u00fck Risk\" { \"DarkGreen\" } \"Orta Risk\" { \"Yellow\" } \"Y\u00fcksek Risk\" { \"Red\" } \"\u00c7ok Y\u00fcksek Risk\" { \"DarkRed\" } } )<\/pre> <pre><code ><\/code><\/pre> <pre><code ><\/code><\/pre> <h3>\u00a0Otomatik D\u00fczeltme ve Uyum Sa\u011flama<\/h3> <pre><code ><\/code><\/pre> MFA uyumunu otomatik olarak iyile\u015ftirmek i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 uygulayabilirsiniz: <pre><code ><\/code><\/pre> <ol> <li>MFA etkinle\u015ftirmesi gereken kullan\u0131c\u0131lar i\u00e7in otomatik e-posta bildirim g\u00f6nderimi:<\/li> <\/ol> <pre><code ><\/code><\/pre> <pre><code ># MFA eksik kullan\u0131c\u0131lara bildirim g\u00f6nder $mfaMissingUsers = $detailedReport | Where-Object { $_.MFADurumu -eq \"Devre D\u0131\u015f\u0131\" } foreach ($user in $mfaMissingUsers) { $emailBody = @\" Say\u0131n $($user.DisplayName), \u015eirketimizin g\u00fcvenlik politikas\u0131 gere\u011fi, Microsoft 365 hesab\u0131n\u0131z i\u00e7in \u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (MFA) etkinle\u015ftirmeniz gerekmektedir. MFA'y\u0131 etkinle\u015ftirmek i\u00e7in: 1. https:\/\/aka.ms\/mfasetup adresine gidin 2. Kurumsal hesab\u0131n\u0131zla oturum a\u00e7\u0131n 3. Ek g\u00fcvenlik do\u011frulama y\u00f6ntemlerinizi kurun Daha fazla bilgi i\u00e7in IT Yard\u0131m Masas\u0131 ile ileti\u015fime ge\u00e7ebilirsiniz. Sayg\u0131lar\u0131m\u0131zla, IT G\u00fcvenlik Ekibi \"@ # E-posta g\u00f6nderme kodunu burada uygulay\u0131n # Send-MailMessage vb. } <\/code><\/pre> <pre><code ><\/code><\/pre> <h2>Y\u00f6neticiler i\u00e7in PowerShell ile zorunlu MFA uygulama<\/h2> <div > <div ><\/div> <\/div> <pre  data-enlighter-language=\"python\"># Y\u00f6netici hesaplar\u0131 i\u00e7in MFA'y\u0131 zorunlu k\u0131l $adminUsers = $privilegedUsers | Where-Object { $_.MFADurumu -eq \"Devre D\u0131\u015f\u0131\" } foreach ($admin in $adminUsers) { # Kullan\u0131c\u0131 ba\u015f\u0131na MFA'y\u0131 etkinle\u015ftir $st = New-Object -TypeName Microsoft.Online.Administration.StrongAuthenticationRequirement $st.RelyingParty = \"*\" $st.State = \"Enabled\" $sta = @($st) Set-MsolUser -UserPrincipalName $admin.Kullan\u0131c\u0131PrincipalName -StrongAuthenticationRequirements $sta Write-Host \"$($admin.Kullan\u0131c\u0131Ad\u0131) ($($admin.Rol)) i\u00e7in MFA zorunlu k\u0131l\u0131nd\u0131\" -ForegroundColor Green }<\/pre> &nbsp; <pre><code ><\/code><\/pre> <p >Microsoft Entra ID MFA durumunu izlemek ve raporlamak, organizasyonunuzun g\u00fcvenlik duru\u015funu iyile\u015ftirmek i\u00e7in kritik bir uygulamad\u0131r. Bu rehberde a\u00e7\u0131klanan y\u00f6ntemler ve ara\u00e7larla:<\/p> <ol > <li >T\u00fcm kullan\u0131c\u0131lar\u0131n\u0131z\u0131n MFA durumunu kapsaml\u0131 bir \u015fekilde g\u00f6r\u00fcnt\u00fcleyebilirsiniz<\/li> <li >G\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 proaktif olarak tan\u0131mlayabilirsiniz<\/li> <li >Uyum durumunu \u00f6l\u00e7ebilir ve raporlayabilirsiniz<\/li> <li >G\u00fcvenlik duru\u015funuzu s\u00fcrekli olarak iyile\u015ftirebilirsiniz<\/li> <\/ol> <p >MFA'y\u0131 t\u00fcm kullan\u0131c\u0131lar\u0131n\u0131z i\u00e7in uygulad\u0131\u011f\u0131n\u0131zda, hesap ele ge\u00e7irme sald\u0131r\u0131lar\u0131na kar\u015f\u0131 \u00f6nemli bir koruma katman\u0131 eklemi\u015f olursunuz. D\u00fczenli denetimler ve raporlar, bu kritik g\u00fcvenlik kontrol\u00fcn\u00fcn organizasyonunuzda etkili bir \u015fekilde uyguland\u0131\u011f\u0131ndan emin olman\u0131za yard\u0131mc\u0131 olacakt\u0131r.<\/p> <p >Unutmay\u0131n ki, MFA tek ba\u015f\u0131na yeterli de\u011fildir - kimlik g\u00fcvenli\u011fini kapsaml\u0131 bir \u015fekilde ele alan bir yakla\u015f\u0131m\u0131n par\u00e7as\u0131 olmal\u0131d\u0131r. Ko\u015fullu eri\u015fim politikalar\u0131, risk tabanl\u0131 kimlik do\u011frulama ve en az ayr\u0131cal\u0131k ilkesi ile birlikte kullan\u0131ld\u0131\u011f\u0131nda, MFA modern bir g\u00fcvenlik stratejisinin g\u00fc\u00e7l\u00fc bir bile\u015feni haline gelir.<\/p> <hr \/> <p ><strong>\u00d6nemli Not<\/strong>: Bu rehberde sa\u011flanan PowerShell betikleri, kendi ortam\u0131n\u0131za uyarlanmas\u0131 gerekebilir. \u00dcretim ortam\u0131nda uygulamadan \u00f6nce test ortam\u0131nda denemeniz \u00f6nerilir.<\/p> <pre><code ><\/code><\/pre> <hr \/> <pre><code ><\/code><\/pre> <strong>\u00d6nemli Not<\/strong>: Bu rehberde sa\u011flanan PowerShell betikleri, kendi ortam\u0131n\u0131za uyarlanmas\u0131 gerekebilir. \u00dcretim ortam\u0131nda uygulamadan \u00f6nce test ortam\u0131nda denemeniz \u00f6nerilir. <pre><code ><\/code><\/pre>","excerpt":"\u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (MFA), g\u00fcn\u00fcm\u00fcz\u00fcn siber g\u00fcvenlik ortam\u0131nda kritik \u00f6neme sahip bir g\u00fcvenlik katman\u0131d\u0131r. Microsoft Entra ID...","created_at":"2025-04-05 16:28:29","updated_at":"2026-09-08 03:28:02","category_id":6,"view_count":770,"reading_time":18,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-05 16:28:29","featured_image":"resimyok.jpg","slug":"microsoft-entra-idde-mfa-durumunu-kontrol-etme","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":125,"title":"Active Directory Senkronizasyonunu Devre D\u0131\u015f\u0131 B\u0131rakma","content":"\u015eirketler Microsoft 365 ve Azure bulut hizmetlerine ge\u00e7i\u015f yaparken, \u015firket i\u00e7i Active Directory ile bulut hizmetleri aras\u0131nda kimlik senkronizasyonunu sa\u011flamak i\u00e7in genellikle Azure AD Connect (eski ad\u0131yla DirSync veya Azure AD Sync) kullan\u0131rlar. Ancak belirli durumlarda, bu senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakman\u0131z veya tamamen kald\u0131rman\u0131z gerekebilir. Bu rehberde, Active Directory senkronizasyonunun ne oldu\u011funu, neden devre d\u0131\u015f\u0131 b\u0131rakmak isteyebilece\u011finizi ve bu i\u015flemi g\u00fcvenli bir \u015fekilde nas\u0131l ger\u00e7ekle\u015ftirebilece\u011finizi ele alaca\u011f\u0131z. <h2>\u0130\u00e7indekiler<\/h2> <ol> <li>Active Directory Senkronizasyonu Nedir?<\/li> <li>Senkronizasyonu Neden Devre D\u0131\u015f\u0131 B\u0131rakmal\u0131s\u0131n\u0131z?<\/li> <li>Devre D\u0131\u015f\u0131 B\u0131rakmadan \u00d6nce Dikkat Edilmesi Gerekenler<\/li> <li>Active Directory Senkronizasyonunu Devre D\u0131\u015f\u0131 B\u0131rakma Y\u00f6ntemleri <ul> <li>Y\u00f6ntem 1: Microsoft 365 Y\u00f6netici Merkezini Kullanma<\/li> <li>Y\u00f6ntem 2: PowerShell ile Devre D\u0131\u015f\u0131 B\u0131rakma<\/li> <li>Y\u00f6ntem 3: Azure AD Connect Sunucusundan Kald\u0131rma<\/li> <\/ul> <\/li> <li>Senkronizasyon Durumunu Do\u011frulama<\/li> <li>Senkronizasyon Kald\u0131r\u0131ld\u0131ktan Sonra Yap\u0131lmas\u0131 Gerekenler<\/li> <li>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/li> <li>Senkronizasyonu Yeniden Etkinle\u015ftirme<\/li> <li>Sonu\u00e7<\/li> <\/ol> <h2>Active Directory Senkronizasyonu Nedir?<\/h2> Active Directory senkronizasyonu, \u015firket i\u00e7i Active Directory ortam\u0131n\u0131zdaki kullan\u0131c\u0131 hesaplar\u0131, gruplar ve di\u011fer nesneler ile Microsoft 365 ve Azure Active Directory aras\u0131nda kimlik bilgilerinin otomatik olarak e\u015fitlenmesini sa\u011flayan bir s\u00fcre\u00e7tir. Bu senkronizasyon, Azure AD Connect arac\u0131 taraf\u0131ndan y\u00f6netilir. Bu senkronizasyon sayesinde: <ul> <li>Kullan\u0131c\u0131lar tek bir kimlikle hem \u015firket i\u00e7i hem de bulut kaynaklar\u0131na eri\u015febilir<\/li> <li>Parolalar\u0131n tek noktadan y\u00f6netimi sa\u011flan\u0131r (Parola hash senkronizasyonu veya Pass-through Authentication kullan\u0131l\u0131yorsa)<\/li> <li>Kurulu\u015f gruplar\u0131 ve di\u011fer dizin nesneleri otomatik olarak bulut ortam\u0131na yans\u0131t\u0131l\u0131r<\/li> <li>Federasyon hizmetleri i\u00e7in gerekli temel yap\u0131 sa\u011flan\u0131r<\/li> <\/ul> <h2>Senkronizasyonu Neden Devre D\u0131\u015f\u0131 B\u0131rakmal\u0131s\u0131n\u0131z?<\/h2> Active Directory senkronizasyonunu devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in \u00e7e\u015fitli nedenler olabilir: <ol> <li><strong>Tamamen Buluta Ge\u00e7i\u015f<\/strong>: T\u00fcm kimlik y\u00f6netimini bulut tabanl\u0131 yapmaya karar verdiyseniz ve art\u0131k \u015firket i\u00e7i Active Directory'ye ihtiyac\u0131n\u0131z yoksa<\/li> <li><strong>Senkronizasyon Mimarisini De\u011fi\u015ftirme<\/strong>: Azure AD Connect yap\u0131land\u0131rman\u0131z\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde de\u011fi\u015ftirmeniz gerekiyorsa (\u00f6rne\u011fin, farkl\u0131 bir filtreleme yakla\u015f\u0131m\u0131 kullanmak i\u00e7in)<\/li> <li><strong>Senkronizasyon Sorunlar\u0131<\/strong>: Senkronizasyonda s\u00fcrekli hatalar al\u0131yorsan\u0131z ve yeniden yap\u0131land\u0131rma yapmak istiyorsan\u0131z<\/li> <li><strong>\u015eirket Birle\u015fmeleri\/Sat\u0131n Almalar\u0131<\/strong>: \u0130ki farkl\u0131 Active Directory orman\u0131n\u0131 birle\u015ftiriyorsan\u0131z veya yeni bir kimlik yap\u0131s\u0131na ge\u00e7iyorsan\u0131z<\/li> <li><strong>Test Ortam\u0131ndan \u00dcretime Ge\u00e7i\u015f<\/strong>: Test ama\u00e7l\u0131 bir senkronizasyon kurulumundan \u00fcretim ortam\u0131na ge\u00e7iyorsan\u0131z<\/li> <li><strong>Tekille\u015ftirme Sorunlar\u0131<\/strong>: Tekrar eden veya \u00e7ak\u0131\u015fan nesnelerle ilgili kal\u0131c\u0131 sorunlar ya\u015f\u0131yorsan\u0131z<\/li> <\/ol> <h2>Devre D\u0131\u015f\u0131 B\u0131rakmadan \u00d6nce Dikkat Edilmesi Gerekenler<\/h2> Active Directory senkronizasyonunu devre d\u0131\u015f\u0131 b\u0131rakmadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6nemli noktalar\u0131 g\u00f6z \u00f6n\u00fcnde bulundurmal\u0131s\u0131n\u0131z: <h3>1. Veri ve Eri\u015fim De\u011ferlendirmesi<\/h3> <ul> <li><strong>Kullan\u0131c\u0131 Eri\u015fimi<\/strong>: Senkronizasyon devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131ktan sonra, senkronize edilmi\u015f kullan\u0131c\u0131lar Microsoft 365 hizmetlerine eri\u015femeyecektir (yeni kimlik bilgileri olu\u015fturulana kadar)<\/li> <li><strong>Lisans Durumu<\/strong>: Senkronize kullan\u0131c\u0131lara atanan lisanslar\u0131n durumunu kontrol edin<\/li> <li><strong>Hybrid Yap\u0131land\u0131rmalar<\/strong>: Exchange Hybrid, SharePoint Hybrid gibi yap\u0131land\u0131rmalar\u0131n\u0131z etkilenecektir<\/li> <\/ul> <h3>2. Yedekleme ve Dok\u00fcmantasyon<\/h3> <ul> <li>Mevcut Azure AD Connect yap\u0131land\u0131rman\u0131z\u0131 belgelendirin<\/li> <li>Azure AD'deki kullan\u0131c\u0131lar\u0131 ve gruplar\u0131 yedekleyin veya d\u0131\u015fa aktar\u0131n<\/li> <li>UPN (User Principal Name) de\u011ferlerini ve di\u011fer kritik kullan\u0131c\u0131 \u00f6zelliklerini kaydedin<\/li> <\/ul> <h3>3. \u0130leti\u015fim Plan\u0131<\/h3> <ul> <li>Kullan\u0131c\u0131lar\u0131 olas\u0131 kesintiler hakk\u0131nda bilgilendirin<\/li> <li>Y\u00f6netici ekibine yap\u0131lacak de\u011fi\u015fiklikleri detayl\u0131 bir \u015fekilde a\u00e7\u0131klay\u0131n<\/li> <li>Acil durum plan\u0131 ve geri d\u00f6n\u00fc\u015f stratejisi olu\u015fturun<\/li> <\/ul> <h3>4. Zamanlama<\/h3> <ul> <li>D\u00fc\u015f\u00fck kullan\u0131m saatlerinde i\u015flemi ger\u00e7ekle\u015ftirin<\/li> <li>Yeterli test s\u00fcresi ve kesinti penceresi planlay\u0131n<\/li> <li>Hafta sonu veya i\u015f saatleri d\u0131\u015f\u0131nda bu i\u015flemi yapmay\u0131 d\u00fc\u015f\u00fcn\u00fcn<\/li> <\/ul> <h2>Active Directory Senkronizasyonunu Devre D\u0131\u015f\u0131 B\u0131rakma Y\u00f6ntemleri<\/h2> <h3>Y\u00f6ntem 1: Microsoft 365 Y\u00f6netici Merkezini Kullanma<\/h3> Bu y\u00f6ntem, Microsoft 365 admin portal \u00fczerinden senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in kullan\u0131l\u0131r: <ol> <li><a href=\"https:\/\/admin.microsoft.com\/\">Microsoft 365 Y\u00f6netici Merkezi<\/a>'ne Global Y\u00f6netici kimlik bilgileriyle giri\u015f yap\u0131n<\/li> <li>Sol men\u00fcden <strong>Ayarlar<\/strong> &gt; <strong>Org ayarlar\u0131<\/strong>'na t\u0131klay\u0131n<\/li> <li><strong>Profil<\/strong> sekmesini se\u00e7in<\/li> <li><strong>Dizin senkronizasyonu<\/strong> b\u00f6l\u00fcm\u00fcn\u00fc bulun<\/li> <li>\"Dizin senkronizasyonu etkin\" se\u00e7ene\u011fini kapat\u0131n<\/li> <li>A\u00e7\u0131lan pencerede s\u00fcreci anlad\u0131\u011f\u0131n\u0131z\u0131 do\u011frulay\u0131n ve <strong>Devre d\u0131\u015f\u0131 b\u0131rak<\/strong>'a t\u0131klay\u0131n<\/li> <\/ol> Bu i\u015flem tamamland\u0131\u011f\u0131nda, Microsoft 365 art\u0131k \u015firket i\u00e7i Active Directory'den g\u00fcncellemeleri kabul etmeyecektir. <h3>Y\u00f6ntem 2: PowerShell ile Devre D\u0131\u015f\u0131 B\u0131rakma<\/h3> PowerShell kullanarak senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakmak daha fazla kontrol sa\u011flar ve daha b\u00fcy\u00fck ortamlar i\u00e7in tercih edilir: <ol> <li>Windows PowerShell'i y\u00f6netici olarak ba\u015flat\u0131n<\/li> <li>MSOnline PowerShell mod\u00fcl\u00fcn\u00fc y\u00fckleyin (y\u00fckl\u00fc de\u011filse):<\/li> <\/ol> <pre><code >Install-Module -Name MSOnline <\/code><\/pre> <ol start=\"3\"> <li>Microsoft 365'e Global Y\u00f6netici kimlik bilgileriyle ba\u011flan\u0131n:<\/li> <\/ol> <pre><code >Connect-MsolService <\/code><\/pre> <ol start=\"4\"> <li>Mevcut dizin senkronizasyonu durumunu kontrol edin:<\/li> <\/ol> <pre><code >(Get-MsolCompanyInformation).DirectorySynchronizationEnabled <\/code><\/pre> <ol start=\"5\"> <li>Senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in:<\/li> <\/ol> <pre><code >Set-MsolDirSyncEnabled -EnableDirSync $false <\/code><\/pre> <ol start=\"6\"> <li>Onay istendi\u011finde \"Y\" yaz\u0131p Enter tu\u015funa bas\u0131n<\/li> <li>Senkronizasyon durumunu kontrol edin (False olarak g\u00f6r\u00fcnmelidir):<\/li> <\/ol> <pre><code >(Get-MsolCompanyInformation).DirectorySynchronizationEnabled <\/code><\/pre> <h3>Y\u00f6ntem 3: Azure AD Connect Sunucusundan Kald\u0131rma<\/h3> Senkronizasyonu tamamen kald\u0131rmak ve Azure AD Connect'i sunucudan silmek i\u00e7in: <ol> <li>Azure AD Connect kurulu sunucuya yerel y\u00f6netici olarak giri\u015f yap\u0131n<\/li> <li><strong>Kontrol Paneli<\/strong> &gt; <strong>Programlar ve \u00d6zellikler<\/strong>'e gidin<\/li> <li>Listeden <strong>Microsoft Azure AD Connect<\/strong>'i bulun ve <strong>Kald\u0131r<\/strong>'a t\u0131klay\u0131n<\/li> <li>Azure AD Connect kald\u0131rma sihirbaz\u0131n\u0131 takip edin<\/li> <li>\u0130\u015flem tamamland\u0131ktan sonra sunucuyu yeniden ba\u015flat\u0131n<\/li> <\/ol> <h2>Senkronizasyon Durumunu Do\u011frulama<\/h2> Senkronizasyonun ba\u015far\u0131yla devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in: <h3>Microsoft 365 Y\u00f6netici Merkezi \u00dczerinden Do\u011frulama<\/h3> <ol> <li><a href=\"https:\/\/admin.microsoft.com\/\">Microsoft 365 Y\u00f6netici Merkezi<\/a>'ne giri\u015f yap\u0131n<\/li> <li><strong>Kullan\u0131c\u0131lar<\/strong> &gt; <strong>Aktif Kullan\u0131c\u0131lar<\/strong>'a gidin<\/li> <li>Herhangi bir kullan\u0131c\u0131 i\u00e7in listede \"\u015eirket i\u00e7i E\u015fitleme\" s\u00fctununu kontrol edin - art\u0131k kullan\u0131c\u0131larda \"Senkronize\" etiketi olmamal\u0131d\u0131r<\/li> <\/ol> <h3>PowerShell ile Do\u011frulama<\/h3> <ol> <li>MSOnline PowerShell mod\u00fcl\u00fcn\u00fc kullanarak ba\u011flan\u0131n:<\/li> <\/ol> <pre><code >Connect-MsolService <\/code><\/pre> <ol start=\"2\"> <li>Senkronizasyon durumunu kontrol edin:<\/li> <\/ol> <pre><code >(Get-MsolCompanyInformation).DirectorySynchronizationEnabled \u00c7\u0131kt\u0131 a\u015fa\u011f\u0131daki gibi olmal\u0131 DisplayName OnPremisesSyncEnabled ----------- --------------------- domain <img  src=\"https:\/\/ondernet.net\/wp-content\/uploads\/2025\/04\/Screenshot_4.jpg\" alt=\"\" width=\"1025\" height=\"651\" \/> 3 numaran\u0131n art\u0131k blulut \u015fekline d\u00f6nmesi gerekiyor<\/code><\/pre> <ol start=\"3\"> <li>Kullan\u0131c\u0131lar\u0131n senkronizasyon durumunu kontrol edin:<\/li> <\/ol> <pre><code >Get-MsolUser | Where-Object {$_.ImmutableId -ne $null} | Select-Object UserPrincipalName, ImmutableId <\/code><\/pre> Senkronizasyon ba\u015far\u0131yla devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131ysa, yeni olu\u015fturulan kullan\u0131c\u0131lar\u0131n ImmutableId de\u011feri bo\u015f olacakt\u0131r. <h2>Senkronizasyon Kald\u0131r\u0131ld\u0131ktan Sonra Yap\u0131lmas\u0131 Gerekenler<\/h2> Senkronizasyon devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131ktan sonra, ortam\u0131n\u0131z\u0131 yeni duruma g\u00f6re ayarlaman\u0131z gerekir: <h3>1. Kullan\u0131c\u0131 Hesaplar\u0131n\u0131 D\u00f6n\u00fc\u015ft\u00fcrme<\/h3> Senkronize edilmi\u015f kullan\u0131c\u0131lar otomatik olarak bulut kullan\u0131c\u0131lar\u0131na d\u00f6n\u00fc\u015ft\u00fcr\u00fclmez. Kullan\u0131c\u0131lar\u0131n eri\u015fimi i\u00e7in: <ul> <li>Her kullan\u0131c\u0131 i\u00e7in yeni bulut parolalar\u0131 olu\u015fturun<\/li> <li><a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/msonline\/convert-msoldirsyncenable\">Convert-MsolDirSyncEnabled PowerShell komutu<\/a> kullanarak toplu d\u00f6n\u00fc\u015ft\u00fcrme yap\u0131n<\/li> <li>Gerekirse kullan\u0131c\u0131 \u00f6zniteliklerini man\u00fcel olarak g\u00fcncelleyin<\/li> <\/ul> <h3>2. Gruplar\u0131 Yeniden Olu\u015fturma<\/h3> <ul> <li>\u00d6nemli da\u011f\u0131t\u0131m gruplar\u0131 ve g\u00fcvenlik gruplar\u0131 i\u00e7in bulut s\u00fcr\u00fcmlerini olu\u015fturun<\/li> <li>Grup \u00fcyeliklerini yeniden yap\u0131land\u0131r\u0131n<\/li> <\/ul> <h3>3. Uygulama Yap\u0131land\u0131rmalar\u0131n\u0131 G\u00fcncelleme<\/h3> <ul> <li>SSO (Tek Oturum A\u00e7ma) ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 kontrol edin<\/li> <li>Uygulama izinlerini ve atamalar\u0131n\u0131 g\u00f6zden ge\u00e7irin<\/li> <li>Gerekirse ko\u015fullu eri\u015fim politikalar\u0131n\u0131 g\u00fcncelleyin<\/li> <\/ul> <h3>4. Lisans Y\u00f6netimi<\/h3> <ul> <li>Lisanslar\u0131n do\u011fru kullan\u0131c\u0131lara atand\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n<\/li> <li>Grup tabanl\u0131 lisanslamalar\u0131 g\u00f6zden ge\u00e7irin<\/li> <\/ul> <h2>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h2> <h3>Sorun 1: Senkronizasyon Devre D\u0131\u015f\u0131 B\u0131rak\u0131lam\u0131yor<\/h3> <strong>Belirtiler<\/strong>: Set-MsolDirSyncEnabled komutu \u00e7al\u0131\u015fm\u0131yor veya portal \u00fczerinden devre d\u0131\u015f\u0131 b\u0131rakma i\u015flemi tamamlanm\u0131yor. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ol> <li>Global Y\u00f6netici yetkinizin oldu\u011fundan emin olun<\/li> <li>Son senkronizasyonun tamamlanmas\u0131n\u0131 bekleyin<\/li> <li>Microsoft destek ile ileti\u015fime ge\u00e7in<\/li> <\/ol> <h3>Sorun 2: Kullan\u0131c\u0131lar Eri\u015fim Kaybediyor<\/h3> <strong>Belirtiler<\/strong>: Senkronizasyon kald\u0131r\u0131ld\u0131ktan sonra kullan\u0131c\u0131lar Microsoft 365 hizmetlerine eri\u015femiyor. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ol> <li>Kullan\u0131c\u0131 hesaplar\u0131n\u0131 bulut hesaplar\u0131na d\u00f6n\u00fc\u015ft\u00fcr\u00fcn<\/li> <li>Kullan\u0131c\u0131lara yeni parolalar atay\u0131n<\/li> <li>Lisanslar\u0131n do\u011fru atand\u0131\u011f\u0131ndan emin olun<\/li> <\/ol> <h3>Sorun 3: \"E\u015fitleme \u0130\u015flemi Devam Ediyor\" Hatas\u0131<\/h3> <strong>Belirtiler<\/strong>: Senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakmaya \u00e7al\u0131\u015f\u0131rken \"Dizin e\u015fitleme i\u015flemi devam ediyor\" hatas\u0131 al\u0131n\u0131yor. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ol> <li>72 saat bekleyin (bazen sistemin senkronizasyon durumunu g\u00fcncellemesi zaman alabilir)<\/li> <li>AAD Connect Health durumunu kontrol edin<\/li> <li><a href=\"https:\/\/support.microsoft.com\/\">Microsoft Destek<\/a> ile ileti\u015fime ge\u00e7in<\/li> <\/ol> <h2>Senkronizasyonu Yeniden Etkinle\u015ftirme<\/h2> Gelecekte senkronizasyonu yeniden etkinle\u015ftirmeniz gerekirse: <h3>Azure AD Connect'i Yeniden Y\u00fckleme<\/h3> <ol> <li><a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=47594\">En son Azure AD Connect s\u00fcr\u00fcm\u00fcn\u00fc indirin<\/a><\/li> <li>Kurulum sihirbaz\u0131n\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n<\/li> <li>\"Express settings\" veya \"Customize\" se\u00e7ene\u011fini tercih edin<\/li> <li>Global Y\u00f6netici kimlik bilgilerinizi girin ve kurulumu tamamlay\u0131n<\/li> <\/ol> <h3>PowerShell ile Etkinle\u015ftirme<\/h3> Senkronizasyonu PowerShell ile etkinle\u015ftirmek m\u00fcmk\u00fcn de\u011fildir. Azure AD Connect'in y\u00fcklenmesi gerekir. Active Directory senkronizasyonunu devre d\u0131\u015f\u0131 b\u0131rakmak, Microsoft 365 ve Azure AD ortam\u0131n\u0131z\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde etkileyen bir karard\u0131r. Bu i\u015flem, kullan\u0131c\u0131lar\u0131n kimlik do\u011frulamas\u0131n\u0131, eri\u015fim haklar\u0131n\u0131 ve genel kullan\u0131c\u0131 deneyimini de\u011fi\u015ftirir. Bu rehberde a\u00e7\u0131klanan ad\u0131mlar\u0131 dikkatle uygulad\u0131\u011f\u0131n\u0131zda, senkronizasyonu g\u00fcvenli bir \u015fekilde devre d\u0131\u015f\u0131 b\u0131rakabilir ve bulut kimlik y\u00f6netimine ge\u00e7i\u015finizi sorunsuz bir \u015fekilde tamamlayabilirsiniz. \u00c7ok b\u00fcy\u00fck veya karma\u015f\u0131k ortamlarda, bu i\u015flemi ger\u00e7ekle\u015ftirmeden \u00f6nce Microsoft Premier Support veya bir dan\u0131\u015fmanl\u0131k hizmeti ile ileti\u015fime ge\u00e7meniz \u00f6nerilir. <hr \/> <strong>Not<\/strong>: Microsoft'un hizmetleri ve \u00f6zellikleri zaman i\u00e7inde de\u011fi\u015febilir. Bu rehberi takip ederken, Microsoft'un resmi belgelerini de kontrol etmeniz \u00f6nerilir.","excerpt":"\u015eirketler Microsoft 365 ve Azure bulut hizmetlerine ge\u00e7i\u015f yaparken, \u015firket i\u00e7i Active Directory ile bulut hizmetleri aras\u0131nda kimlik...","created_at":"2025-04-05 16:01:27","updated_at":"2026-09-07 14:34:20","category_id":6,"view_count":731,"reading_time":8,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-05 16:01:27","featured_image":"resimyok.jpg","slug":"active-directory-senkronizasyonunu-devre-disi-birakma","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]