Last week, suddenly My Global Administrator account stopped connecting to Exchange Online management Shell.

Below is the error that I received, that says access denied.

I have checked RemotePowerShellEnabled is True for my account, nothing has changed.

I researched and found that Microsoft has pushed a conditional access policy for below office 365 admin roles that might be causing it.

1. Global administrator
2. SharePoint administrator
3. Exchange administrator
4. Conditional access administrator
5. Security administrator

https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Baseline-security-policy-for-Azure-AD-admin-accounts-in-public/ba-p/245426

This was not the case for our tenant as we have already disabled that policy.

I worked with Microsoft Office 365 team but found no resolution but to use the MFA shell, I am still searching why my account is not working while for other administrator is working fine.

As of now I am using the MFA Exchange online Shell as a workaround.(below is the link)

Exchange Online MFA Shell

Connect-EXOPSSession -UserPrincipalName user@labtest.com  (this will launch the modern authentication)

In my next post, I will merge this as a function to my All in one office 365 Powershell connect to make it usable as a part of powershell profile.

Thanks for reading

Sukhija Vikas

http://SysCloudPro.com