Forum Discussion

MarkGouldAurum's avatar
MarkGouldAurum
Copper Contributor
Jun 30, 2026

Allow Teams desktop on unmanaged Windows, but block Outlook desktop using Entra conditional access

I need to allow Teams to run on non Intuned devices but not allow Outlook desktop to be available

I am looking for a solution for Windows and Mac and ideally linux as well

The issue is Ig I have Office 365 Exchange Online as my resource, it blocks Microsoft Team Services as well

 

How can I fix this

Conditional Access
intune
mobile device management (mdm)
Software Management

1 Reply

  • henry_collins's avatar
    henry_collins
    Tin Contributor
    Jun 30, 2026

    If you're targeting Exchange Online as the resource, Teams gets affected because it relies on Exchange for services like calendar, presence, and meetings. Instead of blocking Exchange entirely, create a separate Conditional Access policy that targets the Office desktop apps client and excludes Microsoft Teams Services where possible. If your goal is Outlook only restrictions, another option is to block the Outlook desktop app via app protection or client app conditions rather than blocking the Exchange resource itself.