Forum Discussion

PKlapwijk's avatar
PKlapwijk
MVP
Dec 15, 2016

Restrict email access to Exchange Online

Hi all,   I have a situation of a customer without an on-prem Active Directory, only using some cloud apps, like Office 365. They want to block access to (in first place) e-mail on non managed dev...
exchange online
PKlapwijk's avatar
PKlapwijk
MVP
Dec 16, 2016

Thanks VasilMichev Was playing with that new options yesterday. It does block OWA and the Win10 build-in mail app, but does not block Outlook. Maybe I`ve done something wrong in my setup, but I`ve not been able to block Outlook on non-managed (not domain joined) Windows devices yet.

PKlapwijk's avatar
PKlapwijk
MVP
Dec 16, 2016

I have enabled modern authentication for Exchange Online.
It now shows me a message access is blocked when I try to connect using Outlook, but is does that on a domain joined device as well. So I have no access to Exchange Online anymore with my test users. 

  • VasilMichev's avatar
    VasilMichev
    MVP
    Dec 16, 2016

    Try using an IP range, the "device is domain joined" requires device registration if I remember correctly.

    • PKlapwijk's avatar
      PKlapwijk
      MVP
      Dec 16, 2016

      Is says "This does not include Azure AD join".

      When I use a trusted IP, it allows me to connect, but when using a laptop outside of the internal network it will block access and that is something we don`t want.

      • VasilMichev's avatar
        VasilMichev
        MVP
        Dec 16, 2016

        Oh sorry, seems I forgot the original question. So you need to use the compliant/domain joined option then. For the first, you need Intune. The later requires device registration, which in turn relies on AD FS, so I guess it's not what you're looking for.

Resources