AZ-Intec-GmbH/ConditionalAccessBaseline
4
0
Fork 0
mirror of https://github.com/j0eyv/ConditionalAccessBaseline.git synced 2026-09-28 10:25:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update

Browse Source
This commit is contained in:
Joey Verlinden
2024-04-10 13:44:33 +02:00
parent d97a9d7651
commit cb7ce31a76
42 changed files with 37 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+37
View File
@@ -139,11 +139,48 @@ This policy requires MFA for all internal identities, for all cloud applications
> Verify the included group(s) and/or add your custom groups which have all internals in it.
### CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk
This policy blocks all internal users which have a **high risk** (sign-in and user risk) status, to all cloud apps, from all platforms.
> [!IMPORTANT]
> Verify the included group(s) and/or add your custom groups which have all internals in it.
### CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices
This policy sets a Sign-in frequency to a maximum of 12 hours for internals, to all cloud apps, using unmanaged Windows or MacOS devices.
> [!IMPORTANT]
> Verify the included group(s) and/or add your custom groups which have all internals in it.
### CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA
This policy requires MFA for internals when enrolling their devices in Intune.
> [!IMPORTANT]
> Verify the included group(s) and/or add your custom groups which have all internals in it.
### CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms
This policy blocks unknown/unsupported device platforms for internals.
> [!NOTE]
> Currently only Windows, MacOS, Android and iOS are supported. If (for example) Linux or Windows Phone is allowed you need to modify the policy.
> [!IMPORTANT]
> Verify the included group(s) and/or add your custom groups which have all internals in it.
### CA205-Internals-IdentityProtection-AllApps-AnyPlatform-CombinedRegistration
This policy requires secrity information registration for internals only from a managed or compliant device.
> [!IMPORTANT]
> Verify the included group(s) and/or add your custom groups which have all internals in it.
### CA206-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ
> [!IMPORTANT]
> Verify the included group(s) and/or add your custom groups which have all internals in it.
### CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA
### CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess
### CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency