How to block users from downloading files in the Teams or Outlook app on a windows desktop?

App Protection Policies (APP)

For controlling actions in apps like Teams and Outlook, you can use App Protection Policies (APP). However, as of now, these are more limited for Teams and Outlook on Windows compared to mobile environments.

Configure App Protection Policies:

1. Create an App Protection Policy:
   • Go to Endpoint security > App protection policies in Intune.
   • Click Create policy, and choose Windows 10 and later.
   • App Settings: Choose Microsoft Teams and Microsoft Outlook.
2. Configure Data Protection Settings:
   • In Data Protection, configure settings like:
     • Prevent saving documents to unmanaged locations.
     • Restrict copy/paste to and from Teams and Outlook.
     • Restrict file sharing.
     • Block printing from apps.
3. Assign the Policy:
   • Apply the policy to the targeted user or device groups.

3. Conditional Access Policies

You can also create Conditional Access Policies to enforce security compliance before allowing access to Teams and Outlook.

• Restrict File Downloading:
  • Use Conditional Access policies to block access to Teams or Outlook unless the device is marked as compliant, thus preventing untrusted devices from downloading data.
• Apply Data Loss Prevention (DLP):
  • Use DLP policies to prevent data sharing or downloading within Teams or Outlook by setting restrictions for documents containing sensitive data.