Conditional Access Policies

[cheekycharly]

Hi folks I was wondering what Conditional Access Policies you all have that you would say are required by default.

 

I know Microsoft recently put in the "Multifactor authentication for admins accessing Microsoft Admin Portals" but i already had a policy in place for that.

 

Any others that I should be using to secure the net?

[mrbios]

My policies:

MFA policy - All users (students included) condition to exclude trusted locations (on prem)

Block legacy authentication - As it says on the tin, i block login attempts from any legacy authentication methods

Block locations - essentially any login attempts outside of the UK

Terms of use (AUP) policy - Applies to staff and governors

[cheekycharly]

My policies:

MFA policy - All users (students included) condition to exclude trusted locations (on prem)

Block legacy authentication - As it says on the tin, i block login attempts from any legacy authentication methods

Block locations - essentially any login attempts outside of the UK

Terms of use (AUP) policy - Applies to staff and governors

 

Thanks for the reply mrbios, I had a search on the forum and nobody seemed to have asked this question and thought it would be a worthwhile one for people to share their default policies.

 

So I have your first three on the list already enabled. Don't have that fourth one. How does that one work?

[mrbios]

So I have your first three on the list already enabled. Don't have that fourth one. How does that one work?

 

In the conditional access section there's a terms of use area, you setup a terms of use policy there, personally i just import the PDF of our staff acceptable usage policy, and then create a conditional access policy that grants permission on terms of use acceptance.

 

Forces staff who only use the system externally, such as governors, to accept the schools AUP. It keeps a record of who has accepted it too.

[cheekycharly]

In the conditional access section there's a terms of use area, you setup a terms of use policy there, personally i just import the PDF of our staff acceptable usage policy, and then create a conditional access policy that grants permission on terms of use acceptance.

 

Forces staff who only use the system externally, such as governors, to accept the schools AUP. It keeps a record of who has accepted it too.

 

I very much like that!

 

At what point does this popup for staff forcing the check box?

 

Putting this on my list for next week to look at.