Quick reminder: Risk-based policies require access to Identity Protection, which is an Azure AD P2 feature.

Do not assign AD P1 users to these policies.

learn.microsoft.com/en-us/azure/ac…

#AzureAD #EntraID #ConditionalAccess #Microsoft #Microsoft 365 #Security

We (Markus, Thomas & me) are excited to announce the next version of Entra ID Security Config Analyzer - EIDSCA (V3). This release includes some overall improvements and a new section to track your #ConditionalAccess policies. You can find the solution at bit.ly/3PtI3Kq

Enforcing reauthentication when activating privileged roles can be achieved by #MicrosoftEntra #ConditionalAccess now. This is a great enhancements for protecting privileges. Can't wait to test other new scenarios. Check out the #TechCommunity article: techcommunity.microsoft.com/t5/microsoft-e…

[𝗚𝘂𝗶𝗱𝗲] 𝗔 𝗣𝗼𝘄𝗲𝗿𝗳𝘂𝗹 𝗖𝗼𝗻𝗱𝗶𝘁𝗶𝗼𝗻𝗮𝗹 𝗔𝗰𝗰𝗲𝘀𝘀 𝗖𝗵𝗮𝗻𝗴𝗲 𝗗𝗮𝘀𝗵𝗯𝗼𝗮𝗿𝗱 𝗳𝗼𝗿 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗦𝗲𝗻𝘁𝗶𝗻𝗲𝗹
This project is some days old but still highly valuable
buff.ly/49WEAMa

#ConditionalAccess #MicrosoftSentinel

🛡️🔐Protect your #AzureAD privileged permissions with protected actions! Assign strong #ConditionalAccess policies to required permissions (7 ATM) and enforce policy at the time of protected actions. Learn more here 👉🏻learn.microsoft.com/en-us/azure/ac… #Cybersecurity #SecurityBestPractices

I've discussed the following issue regarding #ConditionalAccess with a lot of folks now.

If you are using the 'MFA for all users' template and you don't exclude the Store your Windows devices will fall back to Pro SKU if the users log in with a password.
github.com/MicrosoftDocs/…

#Microsoft #cloud #MFA bypasses and preventions (5/6)
#TrustEverybodyButCutTheCards

**** #ConditionalAccess Gaps

#AzureAD #ConditionalAccess makes #accesscontrol decisions based on gathered identity-driven signals: it is Microsoft's #ZeroTrust policy engine, taking signals from

New blog post: Working with personal Windows devices
petervanderwoude.nl/post/working-w…
#MSIntune #Intune #EMS #MDM #MAM #ConditionalAccess #CA #Windows10 #Windows11 #MDfCA

why is now grayed out? #conditionalaccess #entraid Microsoft Entra ID (Azure AD) Dr. Nestori Syynimaa Nathan McNulty someone has any idea?

Detection of Threat:

1. Opened a malicious email/USB drive
2. Attachment infected the computer
3. #DefenderEndpoints (MDE) detected and alerted and provided threat details
4. Isolate machine
5. #Intune marks the a/c as non-compliant
6. #ConditionalAccess blocks user access

Working with Conditional Access Policies? This update is handy!
[Article] Viewing changes to Conditional Access policies just became easier!
janbakker.tech/viewing-change…

Credit: thanks Jan Bakker for diving quickly into it

#ConditionalAccess #AuditLogging

Does your company have external IPv6 addresses and you use #AzureAD ?
Then better update your named locations.

#CAP #ConditionalAccess

learn.microsoft.com/en-us/troubles…

CA Policies....Roll out! <said in Optimus Prime Voice> microsoft.com/en-us/microsof…
I would recommend enabling them now in your tenant though....why give attackers the time before you have better security?
#entra #identity #security #conditionalaccess

#DataProtection through #conditionalaccess and #zerotrust principles in #Office365
#TrustEverybodyButCutTheCards

Recommended industry #bestpractice strategy:

• Granting and restricting access to data and applications for users who meet #compliance standards – i.e.

Great guide on how to reduce risk using Conditional Access

[Article] Prompt users for reauthentication on sensitive apps and high-risk actions with Conditional Access
techcommunity.microsoft.com/t5/microsoft-e…

#CyberSecurity #ConditionalAccess

'How Hard is it to Implement Microsoft 365 Security?' TekkiGurus Liam Cleary (@helloitsliam) tekkigurus.com/how-hard-imple… #Microsoft365 , #M365 , #Azure #Migration #Security #ConditionalAccess #Purview #Compliance #Policies #Protection #Endpoint #DefenderforCloudApps

#ConditionalAccess Policy in Practice...

still not sure if I'm happy with the waiting time...

Some more Microsoft Entra ID (Azure AD) #ConditionalAccess #KQL stuff:

'Which CA policy is causing the MFA prompts?'

Daniel Chronlund | Security MVP should recognise some of those policy names 😄.

Boost your security with #MicrosoftEntra Conditional Access! Learn to protect assets and enhance productivity. Dive into #ConditionalAccess here: msft.it/6014YG6yG #AzSuppSecurity

New version of #EntraID Security Config Analyzer:
Markus Pitkäranta, Sami Lamppu and I had worked on an update of #EIDSCA . This release includes some overall improvements and a new section to track your #ConditionalAccess policies. Check out the new release: github.com/Cloud-Architek…