Update: the change mentioned in this article has been rolled out to all commercial tenants.
Many of you may rely on Exchange Online mobile device access rules to ensure that only approved devices (...
Updated Feb 08, 2021
Version 9.0
Blog Post
4 MIN READ
Upcoming Exchange Online Device Access and Conditional Access changes with Outlook mobile
I got a few more questions regarding this Windows 10 Mail app:
"The Windows 10 Mail/Calendar apps do use the same sync technology that Outlook mobile leverages."
So it is not ActiveSync I assume.
(relevant for https://docs.microsoft.com/en-us/microsoft-365/enterprise/secure-email-recommended-policies?view=o365-worldwide
And this Windows 10 Mail app is using modern authentication or not?
it is not listed here: https://docs.microsoft.com/en-us/Office365/Enterprise/office-365-client-support-modern-authentication
(relevant for https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authentication
(please forgive my confusion)
"The Require device to be marked as compliant can be used, though"
Compliant with fully-blown Windows 10 compliance policy from Intune, yes?
or you mean this compliance?
"You can manage Windows 10 devices by enrolling them as mobile devices. After an applicable policy is deployed, users with Windows 10 devices will be required to enroll in Mobile Device Management for Microsoft 365 Business Standard the first time they use the built-in email app to access their Microsoft 365 email (requires Azure AD premium subscription)."
https://support.microsoft.com/en-us/office/capabilities-of-built-in-mobile-device-management-for-microsoft-365-a1da44e5-7475-4992-be91-9ccec25905b0
+
https://support.microsoft.com/en-us/help/3144451/a-windows-10-device-is-enrolled-as-mobile-when-you-use-mobile-device-m