Forum Discussion
Ben Hicks
Nov 10, 2016Copper Contributor
Restricting client access to other Office 365 tenants
Hi, When allowing connectivity into Office 365, is there a way to restrict access to a single a tenant? For the purposes of DLP I need to prevent internal machines logging onto any another email ...
Mark Glaser
Nov 11, 2016Copper Contributor
That`s something I have to deal with, too.
For me it is allowing access only to company devices. Intune doesn`t offer that.
Ben, for other Office 365 tenants you simple give to user no license in this tenant. So they will have no Mail account there.
As for orther mail systems you can block the URLs for example.
Hope that helps.
Mark
Daniel Kharman
Aug 07, 2017Brass Contributor
You can use Intune's Conditional Access function to restrict access to company devices. Assuming that your definition of a 'company device' is one that is enrolled in Intune.
- Pieter RossouwMar 22, 2022Copper ContributorThis still does not address the issue of accessing another tenant, when on the company owned device. Conditional access only applied to the tenant you're accessing. Tenant restrictions addresses the ability to be able to log into an untrusted O365 tenant from a company device.