Harbour ITMenu

Powered by Office Sentry 2.3.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry

All clients

Compare any report across every client you look after.
What changed this month

Conditional Access coverage

Every row from every client, with the client first. Filter, sort and hide columns as on a client's own report; downloads keep the view.

Download PDFXLSXCSV

Policies 17 of 24

4 to review

Every policy in plain words, enforced ones first.

ClientPolicyStateApplies toAppsConditionsRequires
Contoso Legal LLPCA001 — Admins: Require phishing-resistant MFAOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsMFA
Contoso Legal LLPCA002 — All users: Require MFAOnAll usersAll appsMFA
Contoso Legal LLPCA003 — Block legacy authenticationOnAll usersAll appsClients: ActiveSync, Other legacyBlock
Contoso Legal LLPCA004 — All users: Require compliant or hybrid-joined deviceOnAll usersAll appsPlatforms: windows, macOSCompliant device or Hybrid joined
Contoso Legal LLPCA005 — Block sign-ins from disallowed countriesOnAll usersAll appsLocationsBlock
Contoso Legal LLPCA006 — Require MFA for Azure managementOnAll users1 appMFA
Contoso Legal LLPCA007 — Admins: No persistent browser, 8h sign-in frequencyOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsSession controls
Contoso Legal LLPCA008 — All users: 8h sign-in frequencyOnAll usersAll appsSession controls
Contoso Legal LLPCA009 — Require MFA for device registrationOnAll usersUser actionsMFA
Fabrikam Dental GroupCA001 — Admins: Require phishing-resistant MFAOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsMFA
Fabrikam Dental GroupCA002 — All users: Require MFAOnAll usersAll appsMFA
Fabrikam Dental GroupCA005 — Block sign-ins from disallowed countriesOnAll usersAll appsLocationsBlock
Fabrikam Dental GroupCA006 — Require MFA for Azure managementOnAll users1 appMFA
Fabrikam Dental GroupCA007 — Admins: No persistent browser, 8h sign-in frequencyOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsSession controls
Fabrikam Dental GroupCA008 — All users: 8h sign-in frequencyOnAll usersAll appsSession controls
Fabrikam Dental GroupCA009 — Require MFA for device registrationOnAll usersUser actionsMFA
Northwind TradersRequire MFA for all usersOnAll usersAll appsMFA

Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.