 Conditional access is an important tool in keeping your organization secure. As your organization's administrator, you are able to define where users can log in and where data can be accessed. In this demonstration, I will show you how to set up a conditional access policy so that users can only sign in from the United States. To start, sign in to the admin portal at portal.office.com and choose the admin icon. From the admin portal, hover your mouse over the admin icon to see the full list of administrative portals. Find and select Azure Active Directory. This will open a new tab or window. Select Azure Active Directory from the left-hand menu and scroll down to the security section and choose conditional access. The first thing we will do is establish a location where we want users to be able to log in. Click on the name locations and click the new location button. Give your location a name and select country slash region and select United States. Click create to finish. Now we will set up the actual policy. Select policies just above the name location menu and select new policy. Now we will click on each assignment to populate our policy. You can edit your policy to your own specifications, but for this example, we will create one that affects all users and all ads. You may wish to add an admin account to the exclude list in case you lock everyone out while testing. Since we already added an admin to the exclude list, we can ignore this message. Since we want the policy to block all countries except the United States, we will choose all locations in the include section, but we will select the United States in the exclude section. Remember, the first thing we did was create United States as a location. We will now choose that location from the list. Now in the access control section in the grant control, choose block access. Under enable policy, choose on. Don't forget to give your policy a name and then choose create. The policy should go into effect immediately, but allow yourself 15 minutes before testing. I'm Steve with the Protector Trust train department and we'll see you next time.