This video provides a tutorial on essential Microsoft 365 security settings. The speaker, Jonathan Edwards, guides viewers through 13 basic security policies to enhance their Microsoft 365 tenant's security. He emphasizes the importance of proactive security measures beyond basic email, file, and folder usage.
To restrict access by location, the video instructs you to create a conditional access policy. Within this policy, you'll utilize "named locations." You add the countries where your team operates to this named location (the video uses "approved countries" as an example). Then, create another conditional access policy that targets all users, all cloud apps, and specifies location as a condition. In this second policy, you include all locations but exclude the "approved countries" named location. Finally, set the access control to "block access." This setup allows access only from the specified countries while providing a mechanism for exceptions (e.g., for traveling employees whose devices are deemed compliant). The video suggests using filters to allow compliant devices even when outside the approved countries.
