How do I restrict access to 365 for everyone or a specific group of users from a specific time?

Question

I have a request from a client which is the following, to restrict user access from a certain time, he wants users to only be able to log in during business hours, from 7AM to 6PM, my question is how could I be? doing this? Which Microsoft tool can I use to do this? If this is really possible to do, if you could help me please.

Thank you very much in advance for your help!

Answer 1

Hi João,

Restricting access to Microsoft 365 based on specific time frames is a common request, but it’s not directly supported by Azure AD or Office 365. Here are some potential workarounds:

Conditional Access Policies: You can use Azure Active Directory’s Conditional Access policies to control access based on various conditions. However, these policies do not currently support time-based restrictions.

On-Premises Authentication: If you’re using on-premises authentication (like Pass-through Authentication or AD FS), you could potentially set logon hours in your on-premises Active Directory. However, this would apply to all apps, not just Microsoft 365.

PowerShell Script: Another option is to use a PowerShell script that periodically enables and disables user accounts and revokes tokens. This would also apply to all apps.

Block Sign-In Option: You can leverage the Block Sign-In option if you want to block the user from accessing Azure AD.