This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 7.000000000000001%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN0%3C/text%3E%3C/svg%3E)
I have applied few conditional access policies and i have noticed that some times these policies are Not Applied on user log ins.
This user can never login without conditional policy satisfaction.
In attached image client app is Mobile apps and desktop whereas i have restricted mobile apps in conditions.
This login seems suspicious. How can i verify
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 90%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAK%3C/text%3E%3C/svg%3E)
Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.
I suggest you to check the sign-in events for the suspicious attempts. You can verify the event details as explained in the below reference and to find what's wrong in there
troubleshoot-conditional-access
HI,
There are some values that are different in both entries where Conditional Access was applied and was not applied. How can i identify what is wrong and how the person is getting exempted from conditional access policies on same device?
If you visit sign-in event's Troubleshooting and support tab, the reason for the status is mentioned there.
I have only these tabs.
You may follow the steps explained here: troubleshoot-conditional-access
Select one by one entries and see if you can get those details in any of the vents
There are 2 signins, one where Conditional access is not applied look at screen shot below
other where conditional access is applied but not all policies
the the device is same, what is don't understand is how on ONE SINGLE device one login applied partial conditional access policies , and one some other logins it does not apply at all.
Few more checks as below:
Make sure that all the platforms are selected as below:
Set the access controls. This policy will grant access if any of the following conditions are met:
The user successfully provides an MFA code (the user must be enabled for MFA, and if they haven’t set up their code yet will be prompted to do so)
The user is logging in from a device that is marked as compliant (which means it must be enrolled in Intune first and meet the requirements of the compliance policy)
The user is logging in from a domain joined device
