Policies/NSP-BASE-BLOCK-01.psd1
|
@{ Id = 'NSP-BASE-BLOCK-01' Name = 'Internal-only access' Version = 1 Description = 'Members of the RestrictExternal group can sign in only from trusted locations. This also prevents them being prompted for MFA registration off-site.' Notes = 'Converted from Legacy/Policies/BASE_InternalONLYAccessPolicy.ps1.' LegacyNames = @('Internal ONLY Access Policy', 'Deny INTERNAL only users EXTERNAL access') DefaultState = 'reportOnly' Users = @{ IncludeGroups = @('{Group:RestrictExternal}') ExcludeUsers = @('{BreakGlass}', '{ServiceAccounts}') } Applications = @{ Include = @('All') } Locations = @{ Include = @('All') Exclude = @('AllTrusted') } Grant = @{ Operator = 'OR' BuiltInControls = @('block') } } |