Conditional Access Problems

Fix SharePoint Error: Can't Access Resource from this Network Location

Maira Mehtab Sep 22, 2026 868 views

Question details

A Microsoft 365 global administrator is blocked from opening a SharePoint Online site due to organizational network location policies.

Product: SharePoint Online
Device & OS: not provided
Scenario: An administrator is attempting to open a SharePoint Online site but is blocked by security policies.
Observed behavior: The system displays the error message: 'Due to organizational policies, you can't access this resource from this network location.'

Before you start

Ensure you have access to an alternative Global Administrator account or a 'break-glass' emergency access account in case your primary admin account is completely locked out by the conditional access policy.

Solution 1Recommended

Disable IP Address Restrictions in SharePoint Admin Center

Check and adjust the network location access control settings within the SharePoint Admin Center to ensure your current IP address is not being blocked.

SharePoint allows administrators to restrict access based on specific IP address ranges. If this setting was recently enabled or incorrectly configured, it can lock out users, including Global Administrators.

Open SharePoint Admin Center

Log into the Microsoft 365 Admin Center using an unrestricted Global Administrator account and navigate to the SharePoint Admin Center.

Navigate to Access Control

In the left navigation pane, expand the 'Policies' menu and click on 'Access control'.

Modify Network Location Settings

Click on 'Network location'. Uncheck the option that says 'Allow access only from specific IP address ranges' if it is improperly enabled, or update the listed IP addresses to include your current network.

Save Changes

Click 'Save' at the bottom of the pane. Wait a few minutes for the policy changes to propagate across the tenant.

Solution 2

Review Microsoft Entra Conditional Access Policies

Identify and modify any newly created or improperly scripted conditional access policies in Microsoft Entra ID (formerly Azure AD) that might be blocking network access.

Free Microsoft Office alternative

Try WPS Office for Seamless Offline Document Management

While resolving complex SharePoint and Microsoft 365 network access policies, you may need a reliable way to view and edit your critical documents locally. WPS Office provides a lightweight, comprehensive, and highly compatible alternative to Microsoft Office, ensuring your productivity isn't halted by cloud access errors.

1. Download the Installer: Visit the official WPS Office website and download the free version for your operating system.
2. Install WPS Office: Run the downloaded file and follow the simple on-screen instructions to install the suite.
3. Open Your Documents: Launch WPS Office and immediately open your existing Word, Excel, or PowerPoint files to continue working offline.

Fully compatible with Microsoft Office file formats, including .docx, .xlsx, and .pptx.Work on your important documents locally without relying on strict cloud network policies.Lightweight software suite with extremely fast installation and launch times.Familiar user interface requires no learning curve for migrating teams.

microsoft office alternative - wps office

Frequently Asked Questions

Why did I suddenly lose access to SharePoint with a network location error?

This error typically occurs because another administrator recently changed, tested, or implemented new security settings, such as an IP-based restriction or a Conditional Access policy, which unintentionally blocked your current network's IP address.

Does Conditional Access apply to Microsoft 365 Global Administrators?

Yes. Conditional Access policies apply to all users they are assigned to, including Global Administrators. It is highly recommended to exclude a 'break-glass' emergency administrator account from these policies to prevent total tenant lockouts.

How long does it take for network policy changes to take effect in SharePoint?

Changes to network location settings in the SharePoint Admin Center or Microsoft Entra Conditional Access policies generally take effect within a few minutes, but in some cases, it can take up to a few hours for the changes to fully propagate across all Microsoft 365 services.