What’s NEW & Cool In Microsoft Conditional Access with FULL Demo

[@davidstenhouse5908]

Thank you Andy for so many great video's, I'm starting a new job next week and your Azure vids have been brilliant for refreshing and updating my skills. Many congrats on getting over 60k subscribes, so very deserved 😎

[@AndyMaloneMVP]

Thanks David much appreciated 👍😊

[@y.daoudi8250]

The way you demonstrate things makes IT so sweet! Long to watch each video!!! thank youuuuu

[@AndyMaloneMVP]

Aw thanks so much I appreciate that😊

[@Damian-um7mv]

Thanks a lot for all your great videos .🙂👍👍👍

[@AndyMaloneMVP]

My pleasure!

[@supersandrots]

Great tutorial, as usual! Tnx a lot Andy

[@AndyMaloneMVP]

My pleasure!

[@ashikdindoyal2475]

Very helpful and interresting. Thank you

[@AndyMaloneMVP]

You’re very welcome thank you

[@avijitdas7412]

Love from Bangladesh

[@ommundsvendsen5078]

Hi Andy! Thanks for all your hard work on the canal. I’m wondering how you setup conditional access for tictok?

[@AndyMaloneMVP]

On a manage mobile device in in tune, you can create a conditional access policy and block TikTok from there. Also app protection policies will also help.

[@ommundsvendsen5078]

@@AndyMaloneMVP thanks

[@richardblate9505]

Good Morning. Great video. Thanks for making it. Scenario: BYOD environment using M365 Business premium needs to allow user access to/work with data in Sharepoint/OneDrive and Outlook. The goal is for data to remain in the applications e.g. unable to save local copies, etc. How would this Conditional Access policy be created?

[@AndyMaloneMVP]

Try this instead. Go into Sharepoint admin centre - Access Control. This is your ticket :-)

[@certstudydev]

Amazing content Andy. Do you have any plans on making a course available for this exam sometime MD-102 Endpoint Administrator?

[@standardnerd9840]

Thanks for the video! Conditional Access requires AzureAD P2 correct?

[@AndyMaloneMVP]

Correct 👍😊

[@cpuuk]

One of the better features for sure. When we got this turned on and working the hacks were stopped in their tracks as even stolen credentials were useless from hacking countries.

[@AndyMaloneMVP]

Absolutely! I totally agree. Thanks again,

[@AlBergstein]

Andy it's worth mentioning that this requires a P2 license. I just tried to follow along on my small business and even with a E5 license for myself I can't use this tool. Most small and even some midsize businesses probably will not have this license.

[@AndyMaloneMVP]

Totally understand. Try taking out an E5 trial subscription. Then you’ll be able to practice all of these.

He should always mention licence, because alot of functions are not awailable for lower ones, which alot of companies use.

[@AndyMaloneMVP]

@ thanks for the comment, 99% of the demos I deliver are using an E5 subscription. This is not to provide an overview of the different SKUs but merely to demonstrate the various tools and features. You can then decide on which SKU is best for you. Also remember that if you are business premium, you also have a number of these features as well.

[@AlBergstein]

@@AndyMaloneMVP Yes, I do have an E5, but when I go into AZ to follow along it tells me I need a P2 license to do this. So it doesn't appear that E5 will do the job for this particular lesson!

[@AndyMaloneMVP]

@@AlBergstein In that case you need EM&S as well. Sorry m,y friend I don't make the products

[@markbaker594]

Andy have you ever thought of creating a Microsoft 365 KZbin course pertainng to the latest edition and then randomly updating it when MS changes a few bits and put the changes together in the same video, so you don't have to redo all the work already done?

[@AndyMaloneMVP]

Hi Mark, that sounds like a great suggestion. I have to think how that would work though with KZbin. As the platform wants you to drive traffic from current content. Anyway I guess I’ll think about what can be done. Thanks again.

[@patrick__007]

Hi Andy! This time another type of question. I am wondering what type of IT role you would advice for working with M365 products. I haven't work with other products like Citrix, VMware and that kind of sys admin level.

[@AndyMaloneMVP]

IT support first level or helpdesk is always a good first step and good luck in your career ahead

[@patrick__007]

@@AndyMaloneMVP I totally forgot to mention I have done the Helpdesk job roles for over 10 years now. I want to focus on M365 products and not on legacy sys admin roles.

[@SSPanesar]

Very soon, sure you will hit a mile stone in your journey in IoT video sessions. Good luck.

[@AndyMaloneMVP]

Thanks so much 😊

[@MarkRouleau]

If I would like to pay you for an hour or 2 of your time to pick your brain and try to overcome some issues that don't seem to be documented anywhere, how much would that set me back? It has to do with calendars.

[@AndyMaloneMVP]

I’d love to help unfortunately I’m not an exchange MVP. I would recommend reaching out to the MVP website at Microsoft and do a search for exchange. MVP is they will help you no end

[@markbaker594]

What I was meant to say was MS 365 Fundamentals, looking a my last comment it didn't make much sense

[@AndyMaloneMVP]

Check out my playlists. Many of my sessions are basic :-)

[@vinvvinv7460]

Hi, can you please explain what is GMSA in AD & why it is used & what its purpose is in layman's terms & how to configure it? I know very little about AD. Please it's a request. Please reply.

[@AndyMaloneMVP]

In the old days when administrators used to install applications on computers, they would often do so using their own accounts. As you can imagine this was potentially a nightmare as if a rogue application managed to get admin privileges. Then a hacker could basically take over your machine. A group managed service account is essentially an account with very little privilege that you don’t need to change. Password is four, that can be used to configure applications running in Azure AD and Microsoft 365. Promise security perspective it’s way better. How’s that? 😊

[@vinvvinv7460]

@@AndyMaloneMVP Hey Andy thanks for the explanation appreciate it 🙂. Is it simple to configure this account? I have an AD with server 2012 or 2019 I have been given the task to configure it. Is it similar to the domain user that we create in AD? Also can you please point me to a simple tutorial if any. Thanks again 🙂

[@AndyMaloneMVP]

@@vinvvinv7460 I will definitely use server 2019. For detailed instructions, check out learn.microsoft.com that’s the best resource I can give you

[@fbj73]

50k more and the check is yours!

[@AndyMaloneMVP]

Hehe one step at a time 👍😊

[@scott3107]

Not really deep enough, you don't explore why or implications of using these features. You simply walk through the steps

[@AndyMaloneMVP]

Hi Scott thanks for the feedback. If you want deeper you could alway sign up for a paid class👏

[@scott3107]

Cheers Andy, will consider it. Good channel overall bud!