Remove email access to non corporate devices

Hi,

It sounds you need to create a conditional access policy that targets exchange online and all other users except the director group. (In my opinion, not the best group to exclude... they are the most likely targeted) and require compliant devices.

So all users need to have enrolled/comliant devices except the director group... please do not forgot the create app protection policies for managed and unmanaged devices.

Here is some explanation:

The Chronicles of MAM - Call4Cloud Setting up IOS App protection policies