How do you secure your Microsoft 365? Here are 13 essential security policies for Microsoft 365 security, including conditional …

34 COMMENTS

  1. As always very informative!
    Though I've some questions about 2FA.

    1. What will be the impact for users when disabling SMS from Entra when they've already enabled/using SMS using the Per user MFA?

    2. Do you need to disable Per user MFA when 2FA forced using a CA?

    3. You've excluded the Admin from any CA. How would you enforce 2FA for this one?

    Greetings from overseas, the Netherlands.

  2. Great Vid. Was wondering if you could do a video on Intune device licenses. There is practically no info out there on this. Specifically enrolling Win10/11 devices using Intune device licenses for shared workstations? What are the best ways to do this? What are the limitations? Lots of businesses use shared workstations for healthcare or factory workers that use the same workstations when on shift as others. We want them in Intune without paying per user license. Thanks!

  3. Does the order matter with these policies? I kind of have a few basic general purpose CA policies and a few I want for special cases. Do I put the special cases first or last or does the order not matter and I have fiddle with exclusions for each policy to stop one of them stomping on the others where it shouldn't?

    Also, for licencing purposes, if I set up a 'break-glass' admin account, do I need to have a Business Premium licence attached to it or will one with no licenses be acceptable (providing that is literally its only purpose)? Any technical pros or cons for doing it this way?

  4. Love and appreciate your videos. Regarding MFA, I'm super excited for Device-bound Passkeys in Microsoft Authenticator to come out of Public Preview. This will be a huge step to securing accounts post EvilJynx.

  5. Firstly love the videos thanks so much learnt a bunch.

    Set this up as a lab. I had issues launching outlook and any other app. I wasn’t sure how to configure the intube app policy for mobile and desktop. I watched the other vid but it still just kept looping for login credentials.

  6. What is the minimum licensing required to enable conditional access (365 business premium?) ? And what if you have a mixed licensing environment? Do policies apply to basic users if setup ?

  7. Great video, unfortunately Conditional Access is another paid subscription service on top of a Microsoft 365 Business Standard account. You need a Business Premium, another £7.80 per user a month.

  8. I just wanted to join the group and let you know that your videos are amazing. Straight to the point and very informative. Due to this video, I created a little script in PowerShell using Microsoft Graph that will configure all these conditional access policies and one more that block access to all Azure Admin Portals. I just want to share the script as a little contribution to all the effort and good things that you put on your videos. What is the best way to share it? Thanks again for all your good work

LEAVE A REPLY

Please enter your comment!
Please enter your name here