Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Security Enhancement with Named Locations in Entra ID

Security Enhancement with Named Locations in Entra ID

Written By Krishna R
Last Updated July 6, 2026
Posted In Entra
SHARE

Let’s discuss Security Enhancement with Named Locations in Entra ID. Conditional access is a powerful Microsoft Entra ID (Azure AD) feature. Entra ID is a cloud-based identity and access management service provided by Microsoft. 

It allows organizations to manage user identities, control resource access, and enhance security. When you first start using Microsoft Entra ID, you have some basic settings, but these default settings might not be the best for keeping things secure.

So, organizations need to examine and adjust those settings to ensure they’re as secure as required. The conditional access policy allows organizations to define security and access policies based on specific factors.

Named Locations allow you to define locations used in conditional access policies that boost Security and Precision. These locations can also represent specific network ranges, such as your organization’s network or VPN ranges.

Patch My PC

Security Enhancement with Named Locations in Entra ID

Organizations can define named locations to represent specific physical areas, such as offices or data centres. Named locations are coming under conditional access. Named network locations refer to specific areas within an organization’s network.

Enhancing Security with Named Locations in Conditional Access Policies in Entra ID -Fig.1
Security Enhancement with Named Locations in Entra ID – Fig.1

After clicking on conditional access, select Named location under the Manage option. Named locations are used by Microsoft Entra security reports to reduce false positives and by Microsoft Entra Conditional Access policies. Named Locations marked Trusted or configured in Conditional Access Policies cannot be deleted.

  • Microsoft Entra ID is coming with IPv6 support.
  • This change will make things smoother and help us move away from the limited supply of IPv4 addresses.
Security Enhancement with Named Locations in Entra ID - Fig.2
Security Enhancement with Named Locations in Entra ID – Fig.2
Limitations of Named Locations Defined by IPv4/IPv6 Address Ranges
You can set up to 195 named locations, and these named locations help define specific areas or regions within your network.
Each named location can include up to 2000 IP ranges
Both IPv4 and IPv6 ranges are supported.
You can use CIDR masks greater than /8. This ensures that the range covers a substantial number of IP addresses
Security Enhancement with Named Locations in Entra ID – Table 1

You can create separate Named locations for specific physical areas, such as individual branches or data centres. This allows you to optimize your security policies and easily search through sign-in logs.

If you’re using IPv6, define IPv6 ranges for your named locations too. Microsoft Entra ID operates on IPv4 and IPv6, and users with IPv6 connectivity will likely access it primarily via IPv6.

  • You can define a named location by IPv4/IPv6 address ranges. For this, follow the steps.
  • Name the Location– Choose an appropriate name for your named location.
  • Specify IP Ranges -Specify one or more IP ranges linked to this location; you can add IPv4 and IPv6 ranges.
  • Optionally Mark as a trusted location -mark specific locations, such as your organization’s public network ranges, as trusted.
  • Trusted locations enhance security and risk in Microsoft Entra ID Protection.

Note: Don’t depend too much on the “trusted IPs” section in multifactor authentication settings. It only works with IPv4 addresses and should be used carefully for specific situations.

Security Enhancement with Named Locations in Entra ID - Fig.3
Security Enhancement with Named Locations in Entra ID – Fig.3

Reference

How to secure Microsoft Entra ID tenant

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Krishna. R is a computer enthusiast. She loves writing about Windows 11 and Intune-related technologies and sharing her knowledge, quick tips, and tricks about Windows 11 or 10 with the community.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Entra

Entra ID SSPR Improves Security with Registered Authentication Methods | Impact on Unregistered Users Starting September 2026

Key Takeaway Entra ID SSPR Improves Security with Registered Authentication Methods! Starting September 7, 2026, Microsoft Entra ID Self-Service Password Reset (SSPR) will require users to verify their identity using explicitly registered authentication methods. Directory-sourced contact information, such as mobile phone numbers, business phone numbers, and alternate email addresses, will no longer be accepted for […]

AC Anoop C Nair 4 min read
Entra

Explicit Forward Proxy in Microsoft Entra Internet Access Helps Secure VDI BYOD and Clientless Browsing

Key Takeaways Explicit Forward Proxy in Microsoft Entra Internet Access! This feature allows organizations to use secure web and AI gateway capabilities without deploying the Global Secure Access client, making it useful for browser-based and lightly managed environments. It works with browsers that support Proxy Auto-Configuration (PAC) files. Since this is a prerelease feature, Microsoft […]

AC Anoop C Nair 3 min read
Cloud

Microsoft Enables Entra Writeback for Cloud-Managed Remote Mailboxes to Help Remove Last Exchange Server

Key Takeaways: Let’s discuss about Microsoft Unlocks Entra Writeback for Cloud-Managed Remote Mailboxes to Help Remove Last Exchange Server. For customers with no remaining dependency on their last Exchange Server, a guide for decommissioning your last Exchange Server. Microsoft announced the Public Preview of Cloud-Managed Remote Mailboxes. Microsoft is excited to share these two new milestones […]

AC Anoop C Nair 3 min read