Conditional Access Problems

How to Fix SharePoint Approved Network Locations Configuration Error

Bushra ParveenBushra Parveen Oct 26, 2026 869 views

Question details

An administrator receives an error when trying to restrict SharePoint access to approved network locations using device-specific information.

How to Fix SharePoint Approved Network Locations Configuration Error
Product
Microsoft SharePoint
Device & OS
not provided
Scenario
Configuring conditional access policies in the SharePoint admin center to restrict site access to trusted organization network locations.
Observed behavior
The system rejects the inputted device information and displays a configuration error when attempting to save the allowed network locations.
Before you start

Verify your organization's exact public IP addresses or CIDR ranges, and determine your own current public IP address to ensure you do not inadvertently lock yourself out of the admin center.

Solution 1Recommended

Configure Approved Locations Using Public IP Addresses

Resolve the configuration error by inputting valid public IP address formats instead of local device-specific information.

SharePoint's location-based access control relies on the external IP addresses that the service sees when a user connects. It cannot validate internal device IPs, machine names, or MAC addresses.

1
Identify Your Current Public IP Address

Look up your network's current public IP address. You must include this address in the approved list first to prevent locking yourself out of the SharePoint administration panel once the policy is applied.

2
Format the IP Addresses Correctly

Compile the list of your organization's trusted networks into valid formats. SharePoint only accepts a single public IP address, an IP address range, or CIDR notation (such as 192.168.0.1/25).

3
Input the Allowed Locations

Navigate to the location-based access policy settings in your SharePoint admin center. Clear any local device information previously entered, and type in the verified public IP addresses or CIDR ranges.

4
Verify and Save

Review the entered IP addresses for any syntax or formatting errors, then click save to apply the approved network locations to your SharePoint environment.

Configure Approved Locations Using Public IP Addresses
Important Safety Precaution: Always add your own active administrative public IP address to the allowed list before saving. Failing to do so can immediately block your administrative access to SharePoint.
Free Microsoft Office alternative

Try WPS Office for Seamless Document Collaboration

While configuring complex network access rules for Microsoft SharePoint, you might want a lightweight and highly compatible office suite for your team. WPS Office offers powerful document editing, spreadsheet management, and presentation tools without the heavy administrative overhead.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install WPS Office: Run the installation file and follow the on-screen prompts to set up the lightweight office suite.
  3. 3. Open Your Documents: Launch WPS Office to instantly open, edit, and collaborate on your existing Word, Excel, and PowerPoint files without format loss.
Fully compatible with Microsoft Office formats (.docx, .xlsx, .pptx).Free and lightweight alternative to heavy enterprise office suites.Built-in cloud collaboration and secure file sharing features.Familiar user interface ensuring a zero learning curve for teams.
microsoft office alternative - wps office

Frequently Asked Questions

Why am I getting an error when saving my SharePoint network location?

SharePoint location restrictions specifically require public IP addresses, IP ranges, or CIDR notation. Entering local device information, MAC addresses, or private internal IP addresses will trigger a configuration error.

What is CIDR notation and how do I use it in SharePoint?

CIDR (Classless Inter-Domain Routing) notation is a compact way to represent an IP address and its associated routing prefix (e.g., 192.168.0.1/25). Administrators use this format in SharePoint to efficiently whitelist an entire block of IP addresses at once.

How do I avoid locking myself out when setting up conditional access?

Before enforcing any location-based access policies, you must explicitly add your own current public IP address to the allowed list. This guarantees that your admin session remains trusted and you maintain access to modify the settings later.