Forum Discussion

Brass Contributor

Nov 25, 2020

Solved

how to block the Outlook desktop app while allow them use the Outlook On the Web (OWA)

I want to block users access to outlook from Outlook Desktop Application but let them access outlook from Outlook on the web (OWA) to improve security. Is there someone who knows how to achieve t...

AzureAD

Conditional Access

Intune

Mobile Application Management (MAM)

outlook

Outlook 2016

OWA

v-mysan
Nov 25, 2020
You can use a Conditional Access policy to block desktop apps.

Assignments

Conditions > Client apps > Mobile apps and desktop clients

Grant

Block Access

edirleis

Copper Contributor

Nov 24, 2021

Hi Rudy_Ooms_MVP

Thanks for the suggestion.

I am not sure how to use block access and exclude compliant devices.

I was able to target "Office 365 Exchange Online". Under conditions the device platform checked Windows and Mac and on client Apps checked all but the Browser option. For Grant, I checked "Require device to be marked as compliant". This way, it limits Outlook from opening and it does show the message about enrolling the device. However, it also limits any other O365 App.

A current requirement from InfoSec is not allow local Outlook data (OSTs or PSTs) on personal devices. So, my current thinking is to allow Outlook online on personal devices and block the desktop client.

Regards.

Rudy_Ooms_MVP

MVP

Nov 24, 2021

I would recommend just to make sure users can only access your office365 data when the device is compliant.. when not ...they must use the browser... Plain and easy :)... Make sure you setup mcas / defender for cloud apps to limit the download/copy paste etc or label documents at download

And when all your devices are managed you can do anything you want with them to get compliant with infosec rules

edirleis
Copper Contributor
Nov 26, 2021
Thanks for your suggestion.
Best Regards!