Stop MFA Hijacks: The One Conditional Access Policy You're Missing

📌 Stop MFA Hijacks in Microsoft 365 with Conditional Access Policies

In this video, I show you the #1 Conditional Access policy you’re probably missing — the one that protects users from having their MFA methods hijacked, even if their password is stolen.

You’ll learn how to create a policy in Microsoft Entra (formerly Azure AD) that blocks risky users from registering new MFA methods. PLUS, I’ll walk you through a bonus policy that blocks risky sign-ins entirely — adding an extra layer of protection to your Microsoft 365 environment.

🔐 What you’ll learn:
Why MFA registration needs protecting
The difference between User Risk and Sign-in Risk
How to create Conditional Access policies in Entra
Real-world examples and a bit of humour with Charles Bell

🧑‍🏫 My Online Courses
► Weekly Cyber Awareness Training - https://bit.ly/4lpoSiF
► Discover Microsoft 365 and Get More Done - https://bit.ly/3NI9Uo8

🆓 FREE Facebook Group
From security to productivity apps to getting the best value from your Microsoft 365 investment, join our Microsoft 365 Mastery Group
  / microsoft365mastery  

🆓 FREE Microsoft 365 Guide
Our FREE Guide - How to Build a 5 Star Business Using Microsoft 365
► Download our guide here today: https://bearded365guy.com

💻 Want to Work Together?
Drop me an email: [email protected]

😁 Follow on Socials
TikTok @bearded365guy
Instagram @bearded365guy

📽️ Video Chapters
00:00 Introduction
01:28 The Problem
02:38 Licensing
03:31 Policy - Block MFA for Risky Users
05:00 User Risk vs Sign In Risk
07:12 Policy - Block Sign In with Risk
08:07 Final Thoughts