Now let's go to the lab and check out the
access control settings in SharePoint
Online. We're now in the lab environment,
so let me open up the browser over here.
And for all of our access control
settings, we will go into Access control.
First option that we have is Restrict
access from devices that aren't compliant
in Intune or joined to a domain. You can
either allow full access, allow limited,
web-only access, or block access. Remember
that you can customize this more into the
Azure AD admin center with conditional
access policies; however, this is really
outside of the scope of this course, and
there's other courses on Pluralsight that
cover conditional access. Next up, we have
the Idle session timeout. This is really
to sign out users after a period of
inactivity in SharePoint Online or
OneDrive for Business. If I turn it on, I
can say that I want to sign out users
after 15 minutes of being inactive, and
the warning must be less than the actual
sign-out, so I can put it to 10 minutes,
let's say, and click on Save. Now for the
Network location. If I turn it on, I can
only allow access from specific IP
addresses or IP address ranges, and this
is useful only if you want to force people
to only allow access to Office 365 from
your offices or when they're logged in
VPN. You can either specify a direct
address or a range in both IPv4 and IPv6.
And as the warning says at the top, make
sure that your IP address is included so
you do not lock yourself out because that
wouldn't really be fun, and you would have
to go to Microsoft Support to get help.
Lastly, apps that don't use modern
authentication, such as Office 2010 that
was given as an example, do you want to
allow access or block access? This is
really if you want to force conditional
access on apps and you want to make sure
that users don't use old apps that might
have security risks and they connect those
apps to Office 365. This is it for the
access control settings. Now let's go back
to the slides and talk about other SharePoint Online tenant settings.