Office 365 - Restrict Login

[MatthewL]

I use O365 at home and was reviewing my account this morning and checking for login's, there are a number of hits from the same address in Russia.

 

MFA is now enabled on my account for some reason I didn't have it on but on the base Exchange package can I do anything to restrict IP access or not?

[jslate1980]

I use O365 at home and was reviewing my account this morning and checking for login's, there are a number of hits from the same address in Russia.

 

MFA is now enabled on my account for some reason I didn't have it on but on the base Exchange package can I do anything to restrict IP access or not?

As long as you have P1 or P2 licence. You can restrict by ip range.

[MatthewL]

Can you point me in the direction where to go for this in the control panel?

[jslate1980]

Go to Azure AD admin center > security > conditional access. From there you can block ip address ranges and countries by geo-locations. Only issue is without applying 2fa, anyone can still login using a vpn to mask their ip address.

 

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

[MatthewL]

Thanks I will take a look.

 

Yes I know that is an option, luckily there is only a few accounts on there and not a ton of attempts just want to make things that bit more secure.