Forum Discussion
Your organization doesn't allow you to download, print or sync using this device.
The effective solution we discovered is to execute dsregcmd.exe /leave and then have the user login with their UPN instead of the SAMaccountName, which is our usual practice in the organisation.
MA038814 If you limit access on unmanaged devices, users on managed devices must use one of the supported OS and browser combinations Conditions in Conditional Access policy - Azure Active Directory | Microsoft Docs or they will also have limited access.
- Maybe I needed to add some additional info to the original post but the devices are all using edge.
We are stuck in rut a the tenant is managed on a national level with areas delegated to local IT teams, and we have had very little support from above!
Everything to my knowledge has been set correctlyMA038814 Did you get to the bottom of this? We are experiencing the same issue on some managed devices. For example I have 2 work accounts on my machine, one shows the "Your organisation doesn't allow..." message and the other doesn't.
David_Gumbleton We've also just run into this on managed machines.
I'm sure it is the baseline microsoft security, but in turning it off mean being unprotected. I'll be testing it later today hopefully and can report back.
I've also tried to leave it on and make an exception using Conditional Access.... **Crossing fingers**
- Reach out to the official support then?
