A Category for M365 conditional access
You may not know this, but if you don’t Disable Per User MFA for your users before you start enforcing it with Conditional Access, it wreaks havoc with your policies. I found this out the hard way. I had to disable MFA for a group of users who were in a session that would make […]
Read MoreSometimes you have a scenario where you need to Get M365 Devices to Stay Logged in with Conditional Access. And that is a multiuser device that is enrolled in Intune but also can’t use MFA. Using Remote Help when the device eventually logs out will be extremely helpful. You need to get that device to […]
Read MoreSometimes you have a scenario where you need to Get M365 Devices to Stay Logged in with Conditional Access. I can give you an example. Say you have a dedicated multiuser device that is enrolled in Intune but can’t use MFA. You need to get that device to stay logged in. Having it logged out […]
Read MoreYou have just enrolled an Android mobile phone in Intune (Corporate Owned With Work Profile or Dedicated Work Profile) and Android System Apps and Intune behave differently. Like, they don’t work. They seemed to have disappeared or are asking for administrative permission to operate. I will show you a simple trick that in two steps, […]
Read MoreYou have probably researched tons of articles on how to Bypass MFA With Conditional Access for a single user, group of users or users coming from named or trusted location. All these articles, including Microsoft support, have completely forgotten about one thing that is incredibly important to consider…. What if security defaults are turned off […]
Read MoreEnhance Conditional Access I wrote an article awhile ago about how to use conditional access when MFA is not possible. In some cases you need need to enhance conditional access. What is Conditional Access? As a refresher, Conditional Access is a part of Azure AD that helps organizations improve security and compliance. By creating Conditional […]
Read MoreYou have a group of users that you want to only login into to certain devices in your organization. A good example is a general use account that you only use in one place (like a kiosk or a dedicated work area) but MFA is not feasible. You can use Conditional Access to help with […]
Read More