Limit user login only from domain joined or compliant pc

Question

Dear All,&nbsp;&nbsp;is there anyway we to limit user access mailbox only from domain joined pc, not allowed to login via personal or public pc.&nbsp;&nbsp;for owa we can certainly use ADFS to setup rules, is there any possibility on outlook client either using hma, adfs, or conditional access.&nbsp;&nbsp;Our environment is exchange 2019 hybrid&nbsp;

vasilmichev · Answer

Conditional access should help: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-compliant-device

don_vlogeer · Answer

VasilMichev&nbsp;&nbsp;May I know in CA under target resources, there is no exchange server, if exchange online covering on premise mailboxes as well ?&nbsp;&nbsp;thank you.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

vasilmichev · Answer

The condition you've selected applies only to cloud app (those that integrate with Azure AD). To get CA policies to work with Exchange Server, you should implement HMA: https://learn.microsoft.com/en-us/mem/intune/protect/conditional-access-intune-common-ways-use#intune-conditional-access-for-exchange-on-premises

don_vlogeer · Answer

VasilMichev&nbsp;&nbsp;Thank your for quick respond. Our environment HMA already in position by following this kb, but still no luck using CA.&nbsp;https://learn.microsoft.com/en-us/microsoft-365/enterprise/configure-exchange-server-for-hybrid-modern-authentication?view=o365-worldwide&nbsp;&nbsp;what else would need to setup for CA to control mailbox hosted on exchange server.&nbsp;&nbsp;

vasilmichev · Answer

Are the devices Intune managed?

Forum Discussion

Limit user login only from domain joined or compliant pc

Share

Resources