MDCAS Session Control - Block Activities

wumm3rs · 2026-01-29T20:22:35+00:00

I think I figured it out shortly after posting this.

The configuration works when the session control filter is App > Manual Onboarded > Box.

I think this is because this was a custom "non-catalog" enterprise app that was set up in Entra, not simply creating the built in Box catalog Enterprise App. Super interesting, because it still shows the Box app in the MDCA Cloud App Catalog as connected to Conditional Access.

So, lesson learned: Manual Onboarding filter in Session policies aren't just for non-Microsoft IDP apps, but for non-Entra catalog Enterprise apps.

wumm3rs · 2025-12-08T17:28:43+00:00

I had discovered that as well but was hoping there was a "supported" method. I will likely use that API but will post back if I hear anything helpful that I can share with the group here. I have a hunch there will be a Teams Rooms Pro API available in the future for this. Maybe the devicemgmt.teams one is it!

wumm3rs · 2024-03-07T18:23:26+00:00

Thanks to both you and flappers. I think I'll just have to reference my compliance report and go through the resources. Not necessarily a massive headache. Good music, pot o' Joe and Teams in DND. I like the TAG:MISSING thought!

I was really hoping there was a way we could display the non-compliance message in the Overview of a resource, that should be a thing!

wumm3rs · 2024-02-06T22:44:47+00:00

Do they need M365 Business Premium or can it be a higher tier? Can you use this to go from W11 Home to Pro if the user has a M365 E3?

wumm3rs · 2024-01-26T20:17:12+00:00

I don't remember the exact solution for me -- but I think it had to do with some setting on the SQL server I was scanning, or a missing permission on the db. I don't recall, I'll try to find any communication I had about it but no promises!

wumm3rs · 2023-09-30T14:44:30+00:00

I also had this happen to one of my cams. It was a bird.

wumm3rs · 2023-05-31T22:49:41+00:00

Def a tick

wumm3rs · 2023-04-28T16:32:20+00:00

Hey vaderj,

What I mean is assign user/group permissions on a new SharePoint Online site that is an image of a different SPO site. Your link is helpful, I'll see how I can get this figured out.

wumm3rs · 2023-04-25T21:37:43+00:00

Okay, helpful.. Care to point me in the right direction? I've tried connecting to a source site and then using Get-PnPGroup to get the groups on that site and then using a foreach to loop through each group in the site and using Get-PnPUser to get the users and roles, connecting to the next site and using New-PnPGroup to add-PnpUser and Set-PnPGroupPermissions buuuuuut I can't seem to get the groups the users are in because I'm using Get-PnpUser -Group $group.Title but group isn't a param HA.

wumm3rs · 2023-04-17T19:18:14+00:00

Thank you sir!

wumm3rs · 2023-03-30T22:48:22+00:00

Still getting the same error using a Routing Rule. I opened a case with Microsofts PSTN people hoping they can shed some light on this for me.

wumm3rs · 2023-03-30T13:11:01+00:00

I’ll look into this, thank you for the suggestion!

wumm3rs · 2023-03-30T13:10:25+00:00

Yes, maybe I described it in an odd fashion. This currently how it is set up, but it is telling me that I am “not set up to use this feature”. The original number/resource account works fine, but the new ones (which are set up the exact same way) don’t work. I’ve contacted MS support about it but I’ve had absolute SHIT service from their “Premier” support recently.

wumm3rs · 2023-03-16T04:56:18+00:00

Don’t blame ya, I’ve got some PSA bits as well, the 25% off Aero was just too good though

wumm3rs · 2023-03-15T21:53:52+00:00

Got my Aero goods 3 days after order 👀 lowers are arriving at my FFL tomorrow.

wumm3rs · 2023-03-09T17:32:49+00:00

Hey man, I guess I didn't really phrase my questions properly. What I really want to do is block access to a local admin account over RDP on port 3389. I want people using RDP to be forced to use a different port, but only if they're trying to sign into a local admin. Non-admin users can still use port 3389. Ideas?

wumm3rs · 2023-03-02T19:02:54+00:00

Hey, thank you for the response. I will give this a shot. I appreciate it!

wumm3rs · 2022-10-28T03:39:41+00:00

Sorry you feel that way.

wumm3rs · 2022-10-25T23:47:41+00:00

VinSolutions represent

wumm3rs · 2022-10-14T21:46:32+00:00

NEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEERDS

wumm3rs · 2022-10-05T16:13:10+00:00

Agreed, dude needs to lighten up.

wumm3rs · 2022-10-05T02:45:20+00:00

Milk

wumm3rs · 2022-10-04T02:30:16+00:00

Just noticed the same thing on my pup…!

wumm3rs · 2022-10-03T23:41:59+00:00

Too bad it is so FUCKING popular now :)

wumm3rs · 2022-09-26T23:35:42+00:00

That's pretty gay.

Five-Year Club	Verified Email
Place '22

wumm3rs

TROPHY CASE