Work from another country

Question

Hi Team,

We have a geo-location policy in place. We want to make an exception for a user to work from another country. We want to mitigate any risk by working from that location. Are there any additional measures we can put in place on the user's account or device to ensure he works securely?

Thank you for your help,

Answer 1

Hi Jennifer,

Thank you for contacting the community forums.

You can exclude the users IP range from the Conditional access policy if you their IP will be be constant. Or you can exclude the country.

Another option you may consider is to exclude by device filtering.

You have various properties you can exclude by.

Trust Type: azure ad joined, registered, hybrid,

DeviceID

Device ownership

etc...

In regards to securing the users account. you can enforce MFA via CA policy and perhaps consider bitlocker encryption for the device.

https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.