How do I block a specific IP address range from logging into Microsoft 365?

Question

I have a user in Sweden. MFA is enabled on his account but there consistently shows a login from Diamond Bar California. The user claims that he does not use a VPN service and is not logged in during the times that the login log shows. The IP address range is consistent. How can I block the ip address range?

The login audit shows

Multifactor authentication: Status Success

Continuous access evaluation: No

Additional Details: MFA requirement satisfied by claim in the token

Thanks

Ted

Answer 1

Hello Ted Jones,

Thanks for your question

With the location condition in Conditional Access, you can control access to your cloud apps based on the network location of a user. You can do this by following the steps here: Conditional Access: Block access by location

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola