Hi David, great article thanks. I have a follow up question regarding implementation.
I successfully configured the Conditional Access policy for Windows only and for browser only and it works as designed so I answered my own previous question, however...
When changing my EXO OWAMailboxPolicy setting for ConditionalAccessPolicy: to ReadOnly I found that it automatically added content to the following line: ConditionalAccessFeatures as shown below, where it was previously blank. I can't find any information on what these options mean and if there is any way to edit them.
- ConditionalAccessFeatures : {Offline, AttachmentDirectFileAccessOnPrivateComputersEnabled,
AttachmentDirectFileAccessOnPublicComputersEnabled,
AttachmentPrintWithoutDownload}
Of particular interest is AttachmentPrintWithoutDownload.
Can I disable this so that users cannot Download or Print content from a non-compliant computer?