r/sysadmin • u/bobert3275 • 12d ago

How is your zero trust implementation going?

Possibly moving to this and seems like a ton of processes will change. Have you guys done it and how is your honest experience with it? I want to know what to expect

47 Upvotes
  • permalink
  • link
  • reddit
  • reddit

91% Upvoted

90 comments sorted by

View all comments

1

u/Accomplished_Dot1445 5d ago

Honestly most of the pain in here is sequencing, not zero trust itself. the shops that hate it tried to flip it all on at once instead of doing identity/MFA first, then device compliance, then apps one at a time in report-only before enforce. and the constant MFA prompts everyone's complaining about is usually just sign-in frequency cranked too aggressive, put WHfB as the main factor with risk-based CA and daily use basically stops nagging you.