Industry trends and changes in the way we work usually span years, with organizations evolving at their own pace. But we're living in unusual times.
Organizations asking employees to work from...
Updated Jul 28, 2020
Version 18.0
Blog Post
Regarding "Question: What steps should I take for users connecting to my corporate network through a VPN?":
We have VPN through RRAS. We've enabled Conditional Access in the VPN profile. Our devices are all Hybrid Azure AD Joined.
Can we enforce MFA (through Conditional Access) every time on our Hybrid joined devices when the user connects to the VPN? Even if the device is enrolled in Windows Hello for Business?
We tried last year and came up dry - with the answer that it's working as intended. The answer from support was that when we Hybrid join, the device gets an MFA token in the PRT.
Can you tell me if this is correct, or if the behavior has changed since then?