Harbour ITMenu

Powered by Office Sentry 2.3.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry

All clients

Compare any report across every client you look after.
What changed this month

Conditional Access coverage

Every row from every client, with the client first. Filter, sort and hide columns as on a client's own report; downloads keep the view.

Download PDFXLSXCSV

Policies 24

4 to review

Every policy in plain words, enforced ones first.

ClientPolicyStateApplies toAppsConditionsRequires
Contoso Legal LLPCA001 — Admins: Require phishing-resistant MFAOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsMFA
Contoso Legal LLPCA002 — All users: Require MFAOnAll usersAll appsMFA
Contoso Legal LLPCA003 — Block legacy authenticationOnAll usersAll appsClients: ActiveSync, Other legacyBlock
Contoso Legal LLPCA004 — All users: Require compliant or hybrid-joined deviceOnAll usersAll appsPlatforms: windows, macOSCompliant device or Hybrid joined
Contoso Legal LLPCA005 — Block sign-ins from disallowed countriesOnAll usersAll appsLocationsBlock
Contoso Legal LLPCA006 — Require MFA for Azure managementOnAll users1 appMFA
Contoso Legal LLPCA007 — Admins: No persistent browser, 8h sign-in frequencyOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsSession controls
Contoso Legal LLPCA008 — All users: 8h sign-in frequencyOnAll usersAll appsSession controls
Contoso Legal LLPCA009 — Require MFA for device registrationOnAll usersUser actionsMFA
Contoso Legal LLP mediumCA010 — Insider risk: Step-up MFAOn, but never applies (needs Entra ID P2)All usersAll appsUser risk: highMFA
Contoso Legal LLP mediumCA011 — High sign-in risk: BlockOn, but never applies (needs Entra ID P2)All usersAll appsSign-in risk: highBlock
Fabrikam Dental GroupCA001 — Admins: Require phishing-resistant MFAOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsMFA
Fabrikam Dental GroupCA002 — All users: Require MFAOnAll usersAll appsMFA
Fabrikam Dental GroupCA005 — Block sign-ins from disallowed countriesOnAll usersAll appsLocationsBlock
Fabrikam Dental GroupCA006 — Require MFA for Azure managementOnAll users1 appMFA
Fabrikam Dental GroupCA007 — Admins: No persistent browser, 8h sign-in frequencyOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsSession controls
Fabrikam Dental GroupCA008 — All users: 8h sign-in frequencyOnAll usersAll appsSession controls
Fabrikam Dental GroupCA009 — Require MFA for device registrationOnAll usersUser actionsMFA
Fabrikam Dental Group mediumCA010 — Insider risk: Step-up MFAOn, but never applies (needs Entra ID P2)All usersAll appsUser risk: highMFA
Fabrikam Dental Group mediumCA011 — High sign-in risk: BlockOn, but never applies (needs Entra ID P2)All usersAll appsSign-in risk: highBlock
Fabrikam Dental GroupCA003 — Block legacy authenticationReport-onlyAll usersAll appsClients: ActiveSync, Other legacyBlock
Fabrikam Dental GroupCA004 — All users: Require compliant or hybrid-joined deviceReport-onlyAll usersAll appsPlatforms: windows, macOSCompliant device or Hybrid joined
Northwind TradersRequire MFA for all usersOnAll usersAll appsMFA
Northwind TradersMFA for admins (report only)Report-onlyGlobal AdministratorAll appsMFA

Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.