Forum Discussion
Prevent o365 E3 users from configuring outlook on there home pc
HI
We have Office 365.
How can we prevent that users configure their personal pc's with our mailboxes inoutlook
Kind Regards,
David
4 Replies
- We can do it with AD FS claim rule or Azure AD Premium. Or an other simple solution is disable IMAP, POP, MAPI for mailbox, only enable OWA :D
AD FS claims rules if you are federated, Conditional access if you are not. Here's a good starting point: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-supported-apps
Hi Thanks,
we have adfs but if im right we can only require to be in the company network and block extranet.
wich means we would need vpn to open outlook.
Isnt there a way where it can look if the computer is domain joined or somthing ?
Kind Regards,
David
With newer versions of AD FS you can use device registration and similar. Or even device authentication: https://technet.microsoft.com/en-us/library/mt593303(v=ws.11).aspx
If you mean for laptops and such, as long as you have authenticated inside the local environment and have a valid token, changing the network will not prevent you from accessing Outlook. And in case the token does expire while you are off premises, you can always VPN in.
Conditional access does have an option to "require domain joined device" if you want to go that route.
