How to set up an IP address

Question

How to set up an IP address

mbali mokoena 0

How to block an IP address on PowerShell on windows

This question is related to the following Learning Module

Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-31T07:16:58.4566667+00:00

Hello mbali mokoena,

As per the description, we understand that you want to know how to block a particular IP address on Powershell.

Let us know if you want to block access only through powershell or something else.

In general, we can configure Conditional Access policy to block certain IP addresses.

Please find below reference to configure a policy to block an IP address.

Sign-in to Entra ID with Global Admin privileges and navigate to Security - Named Locations

Here you can add the list of IP addresses that you want to block and give it a name (ex : blocked IPs)

And navigate to Conditional Access Policy and create a new policy

Give your policy a name.

Under Assignments, select Users or workload identities.

Under Include, select list of users that you want to block from these IP addresses.

If you are adding all users or group of users and want to exclude few users, you can exclude.

(Under Exclude, select Users and groups and choose your organization's emergency access or break-glass accounts.)

Under Target resources > Resources (formerly cloud apps) > Include, select All resources (formerly 'All cloud apps').

Under Network.

Set Configure to Yes

Under Include, select Selected networks and locations

Select the blocked location you created for your organization. (ex: blocked Ips)

Click Select.

Under Access controls > select Block Access, and click Select.

Confirm your settings and set Enable policy to Report-only.

Select Create to create to enable your policy.

After administrators confirm the settings using report-only mode, they can move the Enable policy toggle from Report-only to On

Please let me know if this helps or re-direct us to your query precisely, so that it will help us to assist you better.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-04-01T00:46:56.19+00:00

Hello mbali mokoena,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-04-02T02:05:57.8866667+00:00

Hello mbali mokoena,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

1 answer

Your answer

Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-31T07:16:58.4566667+00:00

Hello mbali mokoena,

As per the description, we understand that you want to know how to block a particular IP address on Powershell.

Let us know if you want to block access only through powershell or something else.

In general, we can configure Conditional Access policy to block certain IP addresses.

Please find below reference to configure a policy to block an IP address.

Sign-in to Entra ID with Global Admin privileges and navigate to Security - Named Locations

Here you can add the list of IP addresses that you want to block and give it a name (ex : blocked IPs)

And navigate to Conditional Access Policy and create a new policy

Give your policy a name.

Under Assignments, select Users or workload identities.

Under Include, select list of users that you want to block from these IP addresses.

If you are adding all users or group of users and want to exclude few users, you can exclude.

(Under Exclude, select Users and groups and choose your organization's emergency access or break-glass accounts.)

Under Target resources > Resources (formerly cloud apps) > Include, select All resources (formerly 'All cloud apps').

Under Network.

Set Configure to Yes

Under Include, select Selected networks and locations

Select the blocked location you created for your organization. (ex: blocked Ips)

Click Select.

Under Access controls > select Block Access, and click Select.

Confirm your settings and set Enable policy to Report-only.

Select Create to create to enable your policy.

After administrators confirm the settings using report-only mode, they can move the Enable policy toggle from Report-only to On

Please let me know if this helps or re-direct us to your query precisely, so that it will help us to assist you better.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-04-01T00:46:56.19+00:00

Hello mbali mokoena,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-04-02T02:05:57.8866667+00:00

Hello mbali mokoena,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Answer 1

Marcin Policht 50,570 MVP Volunteer Moderator

To block IP addresses in the context of Entra ID MFA, you would use Conditional Access policies in Microsoft Entra ID.

For details, refer to https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-block-by-location

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Share via

How to set up an IP address

1 answer

Your answer