Support tip: Migrate your classic Conditional Access policies

Thanks for the update confirming that the [Windows Defender ATP] Device policy policy is no longer required and can be safely deleted - supported by the latest update to the Microsoft documentation on this.

Please can you provide more information on what this statement means "Microsoft Defender for Endpoint or for third-party Mobile Threat Defense scenarios".

For example it would be helpful if you could list what these connectors are, e.g. we have the following:

• [GraphAggregatorService] Mobile App Management policy
• [Office 365 SharePoint Online] Mobile App Management policy
• [Outlook Service for OneDrive] Mobile App Management policy

So are these in scope of the above statement?

They haven't been created by us so must be have been automatically created by something like Intune as they look related to mobile application management.

Please can you publish an explicit list of what classic policies would have been automatically created by Microsoft service and what ones can be safely deleted.

If a policy isn't on this list then we know it needs to be re-created as a new policy.

We need explicit clarity on this as it looks like the confusion is around policies that have been created by Microsoft services, and so need to have confirmation what these are and if they are still relevant.

Thanks

Owain