Forum Discussion

StuartK73's avatar
StuartK73
Steel Contributor
Apr 30, 2026

App Enforced Restrictions not working on Chrome

Hi All   I hope you are well. Anyway, a strange one here. We have implemented App Enforced Restrictions on unmanaged / BYOD macOS devices. This seems to have taken effect on Edge and Safari brow...
Conditional Access
intune
Lucaraheller's avatar
Lucaraheller
MCT
May 28, 2026

Hi Stuart,

I would first confirm whether Chrome is being treated as a supported browser for the control you are trying to enforce.

App Enforced Restrictions are limited and mainly apply to Exchange Online and SharePoint Online. In my experience, Edge usually gives the most predictable result because it integrates better with Microsoft Entra ID, Conditional Access, and Microsoft data protection controls.

On unmanaged / BYOD macOS devices, you usually cannot truly “force” the user to use Edge unless the device is managed. What you can do is control access:

  • Allow limited access from supported browsers.
  • Block access where the required controls cannot be enforced.
  • Use Conditional Access App Control / Defender for Cloud Apps if you need stronger session control.
  • Recommend or require Edge as the supported browser for corporate access.

So I would not treat this as an Intune issue only. It is more about which browser can enforce the session control correctly on an unmanaged device.

Microsoft documentation:

https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-all-users-app-enforced-restrictions

https://learn.microsoft.com/en-us/sharepoint/app-enforced-restrictions

https://learn.microsoft.com/en-us/defender-cloud-apps/proxy-intro-aad