jblackburnHWGA Posted January 25, 2023 Posted January 25, 2023 What's the best way to restrict sign ins to UK and maybe France only in azure? I want to set it to help with some of phishing e-mails the teachers and kids love to click from time to time. would it be in security and named locations?
StormTrooper59 Posted January 25, 2023 Posted January 25, 2023 It's done via Conditional Access in Azure AFAIK but requires a certain type of Azure Premium license. I've no idea on the costs involved.
jblackburnHWGA Posted January 25, 2023 Author Posted January 25, 2023 I've got A3 at the moment but will be moving to A5 this year as we plan on using teams phones
ultimatepie Posted January 25, 2023 Posted January 25, 2023 A3 and A5 are in the same category standard user and admin, don't you mean E3 and E5
jblackburnHWGA Posted January 25, 2023 Author Posted January 25, 2023 This is education E3 and 5 are for enterprise A3 and 5 are for education I have A3 currently
Mako Posted January 25, 2023 Posted January 25, 2023 (edited) You won't be able to do any Conditional Access with any of the A licenses. I'd advise getting an E3, or separate P1, for what you want to achieve. See post below. Edited January 25, 2023 by Mako
jblackburnHWGA Posted January 25, 2023 Author Posted January 25, 2023 Thanks Mako, just about to start getting quotes for renewals so i'll make it a point as part of the quotes.
Bumhug360 Posted January 25, 2023 Posted January 25, 2023 You won't be able to do any Conditional Access with any of the A licenses. I'd advise getting an E3, or separate P1, for what you want to achieve. To benefit from the Conditional Access App Control capabilities in Defender for Cloud Apps, users must also be licensed for Azure Active Directory P1, which is included in Enterprise Mobility + Security F1/F3/E3/A3/G3, Enterprise Mobility + Security E5, Microsoft 365 E3/A3/G3, Microsoft 365 E5/A5/G5, and Microsoft 365 E5/A5/G5/F5 Security and Microsoft 365 F5 Security & Compliance. Microsoft 365 guidance for security & compliance - Service Descriptions | Microsoft Learn Works fine with both A3 and A5 2
Mako Posted January 25, 2023 Posted January 25, 2023 I stand corrected and have removed my incorrect information.
jblackburnHWGA Posted January 25, 2023 Author Posted January 25, 2023 Brill thank you. Something to get working on then!
k-strider Posted January 25, 2023 Posted January 25, 2023 I have done this in Audit mode. First create the Location then make the conditional access. - All users Exclude (a super admin so you dont get locked out) All Cloud Apps 1 Condition (the location) Include All Locations - Exclude the location you setup United Kingdom Grant Block Access Enable Policy Report -only Then you can use insights and reporting i can see 6 soft fails on the last 24 hours of 468 In order to get this (the insights) working i had to sign up to Azure with my AMEX and create a Log Analytic workspace. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-insights-reporting
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now