You have to configure everything yourself without Autodiscovery but also not with modern authorization. If you choose for Sign In the modern authorization method will be used with Autodiscovery. Start the Mail app and click Exchangeįill in your email address and click Next Let’s do the same test with the native Mail client. Open the Microsoft Outlook app and click Get Startedįill in your email address and click Add accountĪs you can see, the user is forced to Enroll the device before access to email is granted.
I will now show you what the effect of this policy is on a Apple iPad device within the Microsoft Outlook app and also the native Mail app. Make sure that Enable policy is set to On and click on Create Testing the Conditional Access policy to enforce device enrollment (Part 1) Click on Select in the bottom of the screen. On the right hand side of the screen click Grant access and select Require device to be marked as compliant. On the right hand side click Select client apps and select both Browser and Mobile apps and desktop clients. Select Conditions, and then choose for Client apps. Click DoneĬlick on Cloud apps, click Select apps en search for Office 365 Exchange Online. Under Assignment click Users and groups and select an Azure AD security group if you want to apply this policy to a selected group of users (optional). For this blog I will give it the name : CA-ExchangeOnline-ModernApps Within the Microsoft Azure Portal, navigate to Intune > Conditional accessĬlick Policies and click the “+ New policy” button. The first step for this blog is to create a Conditional Access policy to enforce device enrollment for modern apps (apps that support modern authentication like Microsoft Outlook). You must know that in both cases you need to configure two separate Conditional Access to let this fully work! I show you why… Configuring Conditional Access to enforce device enrollment (Part 1)
#Configuring office 365 for business for android mail app how to
First I will show you how to enforce device enrollment and second how to enforce the use of the Microsoft Outlook application. In this blog I will show you how to configure Conditional Access to Exchange Online.
Enforce the user to use the managed Microsoft Outlook app for email (native mail clients cannot be used to access email anymore).Enforce the user to enroll the device before access to email is granted (any mail client).The most common Conditional Access policies that I use are With Conditional Access you can control under what conditions the user or device has access to SaaS applications like SharePoint and Exchange Online. In this way you can prevent that users can save email attachments to the local device if they use the management Microsoft Outlook application.īut what makes this all useful if you can just configure mail in an unmanaged native mail client on your iPhone or Android device?įor that, we have the option to configure Conditional Access. Data can be isolated, so it can only be exchanged between other managed apps. You can add an additional security layer to these managed applications by applying an additional access pincode and encrypt the data within the applications. You can enroll all kind of mobile devices to enforce MDM policies, push applications and even configure managed mobile applicaties like the Microsoft Office applications. With Microsoft Intune you can do great things.
0 kommentar(er)
