Question

A user reports they cannot access a SharePoint site from their laptop, receiving an 'access blocked by your organization' message. As the Entra administrator, you need to determine exactly which policy caused the block before making any changes. Which Microsoft Entra ID tool should you use first to identify the specific policy that prevented the sign-in?

Accepted Answer

Review the Sign-in logs and open the failed sign-in's 'Conditional Access' tab to see which policy was applied and its result

Answer

Run the Identity Secure Score assessment to find configuration weaknesses

Answer

Open the Audit logs and filter for directory configuration changes

Answer

Check the user's assigned licenses in the Microsoft 365 admin center