Skip to content

Commit 322910e

Browse files
authored
Merge pull request #112555 from junhasems/patch-24
Update tenant-restrictions-v2.md
2 parents 578a93e + 3f83c18 commit 322910e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/active-directory/external-identities/tenant-restrictions-v2.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -318,7 +318,7 @@ Suppose you use tenant restrictions to block access by default, but you want to
318318
319319
## Step 3: Enable tenant restrictions on Windows managed devices
320320

321-
After you create a tenant restrictions V2 policy, you can enforce the policy on each Windows 10, Windows 11, and Windows Server 2022 device by adding your tenant ID and the policy ID to the device's **Tenant Restrictions** configuration. When tenant restrictions are enabled on a Windows device, corporate proxies aren't required for policy enforcement. Devices don't need to be Azure AD managed to enforce tenant restrictions V2; domain-joined devices that are managed with Group Policy are also supported.
321+
After you create a tenant restrictions V2 policy, you can enforce the policy on each Windows 10 and Windows 11 device by adding your tenant ID and the policy ID to the device's **Tenant Restrictions** configuration. When tenant restrictions are enabled on a Windows device, corporate proxies aren't required for policy enforcement. Devices don't need to be Azure AD managed to enforce tenant restrictions V2; domain-joined devices that are managed with Group Policy are also supported.
322322

323323
### Administrative Templates (.admx) for Windows 10 November 2021 Update (21H2) and Group policy settings
324324

@@ -333,7 +333,7 @@ To test the tenant restrictions V2 policy on a device, follow these steps.
333333

334334
> [!NOTE]
335335
>
336-
> - The device must be running Windows 10, Windows 11, or Windows Server 2022 with the latest updates.
336+
> - The device must be running Windows 10 or Windows 11 with the latest updates.
337337
338338
1. On the Windows computer, press the Windows key, type **gpedit**, and then select **Edit group policy (Control panel)**.
339339

@@ -352,7 +352,7 @@ To test the tenant restrictions V2 policy on a device, follow these steps.
352352

353353
## Step 4: Set up tenant restrictions V2 on your corporate proxy
354354

355-
Tenant restrictions V2 policies can't be directly enforced on non-Windows 10, Windows 11, or Windows Server 2022 devices, such as Mac computers, mobile devices, unsupported Windows applications, and Chrome browsers. To ensure sign-ins are restricted on all devices and apps in your corporate network, configure your corporate proxy to enforce tenant restrictions V2. Although configuring tenant restrictions on your corporate proxy don't provide data plane protection, it does provide authentication plane protection.
355+
Tenant restrictions V2 policies can't be directly enforced on non-Windows 10 or Windows 11 devices, such as Mac computers, mobile devices, unsupported Windows applications, and Chrome browsers. To ensure sign-ins are restricted on all devices and apps in your corporate network, configure your corporate proxy to enforce tenant restrictions V2. Although configuring tenant restrictions on your corporate proxy don't provide data plane protection, it does provide authentication plane protection.
356356

357357
> [!IMPORTANT]
358358
> If you've previously set up tenant restrictions, you'll need to stop sending `restrict-msa` to login.live.com. Otherwise, the new settings will conflict with your existing instructions to the MSA login service.

0 commit comments

Comments
 (0)