https://stefan.dohnal.online/tags/conditional-access/Recent content in Conditional Access on Stefan DohnalHugo -- gohugo.ioen-usTue, 05 May 2026 11:00:00 +0200https://stefan.dohnal.online/blog/the-red-x-illusion-when-conditional-access-says-no-but-still-applies/Tue, 05 May 2026 11:00:00 +0200https://stefan.dohnal.online/blog/the-red-x-illusion-when-conditional-access-says-no-but-still-applies/<p><img src="https://stefan.dohnal.online/images/2026-05-05-banner.png" alt="BannerImage"></p> <!-- omit from toc --> <h2 id="table-of-contents">Table of contents</h2> <ul> <li><a href="#the-confusing-red-x-in-conditional-access">The confusing red X in Conditional Access</a></li> <li><a href="#how-device-filters-really-work">How device filters really work</a></li> <li><a href="#positive-vs-negative-logic-in-device-filters">Positive vs negative logic in device filters</a></li> <li><a href="#why-your-negative-device-filter-shows-a-red-x">Why your negative device filter shows a red X</a></li> <li><a href="#reverse-checking-the-positive-filter-approach">Reverse checking the positive filter approach</a></li> <li><a href="#reading-the-signin-log-correctly">Reading the sign‑in log correctly</a></li> <li><a href="#wrapping-up">Wrapping up</a></li> </ul> <h2 id="the-confusing-red-x-in-conditional-access">The confusing red X in Conditional Access</h2> <p>If you have ever seen the “Corporate needs you to find the difference between these two pictures” meme, Conditional Access has its own version of it.<br> In the sign‑in logs, <strong>Matched</strong> and <strong>Not matched</strong> can both mean <strong>“this policy applied”</strong> when device filters are involved.</p>