Feedback by UserVoice

Blake Whitaker

My feedback

  1. 3,662 votes
    Sign in
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    200 comments  ·  Office 365 Security & Compliance  ·  Flag idea as inappropriate…  ·  Admin →

    Azure Active Directory Conditional Access has functionality for “Countries/Regions” – see

    That said, the most effective protection you can have against password spray attacks is to enable MFA and disable basic authentication. If you cannot do this for your entire organization, then blocking user access to legacy protocols like POP, EWS, IMAP and SMTP is another step you can take. Exchange Online Client Access Rules can help you to further customize ( For additional recommendations, please see Office 365 Secure Score.

    That said, please know that we are listening to feedback and working on solutions to help make Office 365 users more secure. Thank you for the feedback.

    An error occurred while saving the comment
    Blake Whitaker commented  · 

    If I turn on MFA and then the hundreds of login attempts text me all day and night, that will not work. Allow me to block all access outside USA, then I am already more secure. Then if I want to add MFA, at least I wont get text messages all the time. MFA is NOT the answer.

Feedback and Knowledge Base