The Policy That Blocked a Country

Your security team deployed a new Conditional Access policy last week: "Block access from high-risk countries." The policy conditions include a named location of "Blocked Countries" listing 12 countries. This morning, the CEO calls furious: the company just acquired a new subsidiary in Poland, and all 200 Polish employees cannot access Microsoft 365 at all. Poland was accidentally included in the "Blocked Countries" named location. Additionally, 15 executives travelling internationally for a global conference are blocked because three of the conference cities are in countries on the list. The policy is currently in Enabled state (not Report-Only).