In this blog post I will show you how to secure access to your SharePoint Online data with just a few simple settings. I will show you how to block apps that don`t use modern authentication, so we can enforce multi-factor authentication. I will also show you how to only allow full access to your […]
Today a blog post about Azure AD Conditional Access (CA) policies in combination with Exchange and SharePoint Online. I will show in this post how to restrict access to Exchange Online and SharePoint Online in the browser on unmanaged devices. Using these policies we prevent our users to download email attachments or SharePoint files on […]
Today I want to have a look at using Azure Conditional Access to restrict external access to Exchange Online OWA. In Azure CA the condition “Client apps” is in preview, with which we can block Exchange Online access using a browser. Combined with the condition “Locations” we are able to only block external access and […]
Today I`m writing a post about how to force your users to use the Outlook app on iOS and Android devices, even when using a personal non-managed device. A reason for this requirement of forcing your users to use the Outlook app is the use of multi-factor authentication (MFA) on your users mailboxes. Some third-party […]
Often, setting up a separate Active Directory forest that is dedicated to running Exchange is a better solution than integrating the Exchange application into your production Active Directory security forest. The Exchange forest (also known as the resource forest) is dedicated to running Exchange and hosting mailboxes. User accounts are contained in one or more […]
This is a new capability being added to Azure Information Protection (AIP), currently in preview. You can now enable analytics for AIP. To do logon to your Azure portal (https://portal.azure.com) and reach out the Azure Information Protection configuration blade From there you should see Configure analytics (preview) under the Manage section From this configuration blade you can use an […]
In this post, I will show you to connect to Office 365services including Office 365 tenant, Exchange Online, SharePoint Online, and Skype for Business Online with the help of available PowerShell modules. Prerequisites 1. Download and install the following PowerShell modules for Office 365, SharePoint Online, and Skype for Business Online on your machine. Microsoft Online […]
Warning (August 2017): The guidance below is of questionable use now that Microsoft have started to roll out the new Azure AD sign-in experience which doesn’t seem to honour the `?whr` querystring. YMMV! Consider a scenario where you’ve configured custom branding for your Windows Azure Active Directory login URL at https://login.microsoftonline.com. The custom branding doesn’t […]