How Can I Enhance Entra ID Security with Conditional Access Policies?
Hi everyone! I'm new to managing Entra ID security and could use some guidance. My small company experienced a security breach a few weeks ago, with a user…
security policies
Managing Conditional Access During Employee Vacations
I'm working on some conditional access policies that usually block all access from outside the US. When someone goes on vacation, we temporarily lift this block for the…
How to Handle a Restrictive IT Department as a Contractor?
I'm currently working as a DevOps engineer for a company where I used to run the IT department, but I'm now under new IT management. I've been running…
How to Allow Access to Azure DevOps While Restricting Azure Portal Access?
I'm looking for a way to grant users access to the Azure DevOps portal without giving them access to the Azure portal. Our IT security team is concerned…
Can Someone Explain How Our Conditional Access Policy Works?
I'm struggling to get my head around the Conditional Access Policies that were set up by our Managed Service Provider. Basically, we block access from everywhere except the…
Have You Experienced a Mass Removal of Endpoint Indicators in Defender for Cloud Apps?
I recently noticed that while using Defender for Cloud Apps, all the endpoint indicators tied to our cloud discovery apps were wiped from our URL list around 10:00…
How to Set Up Conditional Access Policies Without Locking Out Users?
I'm diving into setting up some Conditional Access (CA) policies and have started with the basics by blocking legacy authentication and enforcing phishing-resistant measures for admin accounts. Currently,…
What’s the Process for Granting VPN Access to Vendors?
Hey everyone! I'm curious about the typical process for granting VPN access to vendors. When you have a vendor needing access, what do you usually ask them to…
Should We Exclude Personal Devices from Token Protection in Entra ID?
I'm trying to figure out the best approach regarding Token Protection in Entra ID, which we've had enabled for all supported applications for several months now. For it…
How to Block Tor Exit Nodes Using Conditional Access
Hey there! I'm looking into a way to block Tor exit nodes for our corporate devices using conditional access in Entra. My setup includes Defender XDR and Applocker,…
Understanding Intune Compliance and Conditional Access Issues
Hey everyone, I'm having some trouble figuring out how Intune and Conditional Access work together. I set up a policy for iOS devices that blocks access to Office…
Why Does My Windows 11 Always Show the Last Signed-In Username After Reboot?
I'm having a bit of a security issue with my Windows 11 machines. Every time we reboot them, the last signed-in username pops up, which feels like a…
How to Keep Automation Running Without Interactive Logins Under NY Regulations?
I'm a sysadmin managing several business processes that are fully automated. I use a combination of Power Automate desktop flows and a third-party automation tool. Recently, New York…
Navigating Challenges with a Colleague in IT
I've started a new job at a small company with about 30 employees, after being unemployed for four months. It's a jack-of-all-trades IT role in a heavily regulated…
How can I automate disabling inactive Active Directory accounts?
Hey everyone! I'm working for a small outsourcing company with about 1,000 users, but only around 20-30 log in daily. My boss is worried about security because many…
How can I get tcpdump to save captures in an SELinux-enforcing environment?
I'm trying to configure tcpdump to save its packet captures to the directory `/var/log/tcpdumpd` while SELinux is set to enforcing mode. The directory has the correct context type…