Harbour ITMenu

Powered by Office Sentry 2.3.1

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry

All clients

Compare any report across every client you look after.
What changed this month

Conditional Access coverage

Every row from every client, with the client first. Filter, sort and hide columns as on a client's own report; downloads keep the view.

Download PDFXLSXCSV

Policies 11 of 24

4 to review

Every policy in plain words, enforced ones first.

Client: Contoso Legal LLPRemove Clear filters
ClientPolicyStateApplies toAppsConditionsRequires
Contoso Legal LLPCA001 — Admins: Require phishing-resistant MFAOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsMFA
Contoso Legal LLPCA002 — All users: Require MFAOnAll usersAll appsMFA
Contoso Legal LLPCA003 — Block legacy authenticationOnAll usersAll appsClients: ActiveSync, Other legacyBlock
Contoso Legal LLPCA004 — All users: Require compliant or hybrid-joined deviceOnAll usersAll appsPlatforms: windows, macOSCompliant device or Hybrid joined
Contoso Legal LLPCA005 — Block sign-ins from disallowed countriesOnAll usersAll appsLocationsBlock
Contoso Legal LLPCA006 — Require MFA for Azure managementOnAll users1 appMFA
Contoso Legal LLPCA007 — Admins: No persistent browser, 8h sign-in frequencyOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsSession controls
Contoso Legal LLPCA008 — All users: 8h sign-in frequencyOnAll usersAll appsSession controls
Contoso Legal LLPCA009 — Require MFA for device registrationOnAll usersUser actionsMFA
Contoso Legal LLP mediumCA010 — Insider risk: Step-up MFAOn, but never applies (needs Entra ID P2)All usersAll appsUser risk: highMFA
Contoso Legal LLP mediumCA011 — High sign-in risk: BlockOn, but never applies (needs Entra ID P2)All usersAll appsSign-in risk: highBlock

Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.