Conditional Access policies Archives - Practical 365

Resolving the Five Most Common Conditional Access Misconfigurations

Brandon Colley — Mon, 10 Jul 2023 10:00:00 +0000

Misconfigured Conditional Access policies may introduce unnecessary risk to your tenant. That is why it is important to make sure these policies are properly configured. In this blog, Brandon Colley reviews the five most common Conditional Access misconfigurations.

The post Resolving the Five Most Common Conditional Access Misconfigurations appeared first on Practical 365.

Five Things Microsoft 365 Security Administrators Should Do in 2023

Tony Redmond — Mon, 20 Feb 2023 11:00:00 +0000

Microsoft 365 security is a big topic. Focus is important when it comes to getting things done. In this article, we suggest five areas that administrators could work on during 2023 to improve the security posture of their tenant. You might already have established full control over some of these areas. Even if you have, it's still good to consider if you can improve security.

The post Five Things Microsoft 365 Security Administrators Should Do in 2023 appeared first on Practical 365.

Using Authentication Context with Azure AD Conditional Access Policies to Secure Access to Sensitive SharePoint Content

James Yip — Mon, 13 Feb 2023 11:00:00 +0000

Today, conditional access policies can restrict access to Microsoft 365 workloads but not to specific objects within a workload, such as individual mailboxes or SharePoint sites. In this article, James Yip explores using Authentication Context with conditional access polices to secure access to sensitive SharePoint content.

The post Using Authentication Context with Azure AD Conditional Access Policies to Secure Access to Sensitive SharePoint Content appeared first on Practical 365.

Ten Ways to Harden the Security of Your Microsoft 365 Tenant – Part 2

Thijs Lecomte — Wed, 02 Mar 2022 07:33:00 +0000

Over the years, the Microsoft security stack has become very feature rich and offers many ways to customize the configuration. Third-party products are available with similar features, but lack the integration capability of the Microsoft stack. In the second part of the "Ten Ways to Harden the Security of Your Microsoft 365 Tenant" series, we look at five ways to secure your environment using controls that require a premium license such as Office E5 or Azure AD Premium.

The post Ten Ways to Harden the Security of Your Microsoft 365 Tenant – Part 2 appeared first on Practical 365.

Planning for Azure AD Conditional Access Policies

Thijs Lecomte — Thu, 10 Feb 2022 18:17:52 +0000

Conditional Access policies provide many security benefits, from the implementation of MFA in a user-friendly way, to the controls that can limit what data users access or download. However, the process of setting up CA policies is daunting to some at first. This article provides some thought processes and best practices to make this security initiative more manageable.

The post Planning for Azure AD Conditional Access Policies appeared first on Practical 365.

Secure Access for Remote Workers without Microsoft Defender for Cloud Apps

Sean McAvinue — Thu, 03 Feb 2022 14:59:09 +0000

In the second article of this 2-part series, we describe the alternatives that exist to help secure access for remote workers, exploring the worthy features that don’t require MDCA. The features detailed in this article are available for any tenant with Azure AD Premium licensing and offer a more generic set of controls for tenants where MDCA licensing is not available.

The post Secure Access for Remote Workers without Microsoft Defender for Cloud Apps appeared first on Practical 365.

Why Separate Microsoft 365 Administrator Accounts are Critical to Security Posture

Thijs Lecomte — Tue, 18 Jan 2022 07:58:00 +0000

There’s a lot of debate around the need to separate Microsoft 365 administrator accounts, especially when controls such as Privileged Identity Management exist within an organization. However, even with PIM there are remaining security concerns which necessitate the operation of separate accounts. This article explains the importance of using separate accounts; details how to target different Conditional Access policies for admin and user accounts and highlights how this approach increases your security posture and limits potential attack vectors against administrator accounts.

The post Why Separate Microsoft 365 Administrator Accounts are Critical to Security Posture appeared first on Practical 365.