Forum Discussion
George Smyrlis
Microsoft
Apr 15, 2020Block download in Teams (Windows 10 application)
Hello,
Is there a way to block data exfiltration (e.g. block download) to Windows 10 Microsoft Teams application (not the web version) in a real time protection manner? Since Intune MAM policie...
Lassaad
Apr 17, 2020MCT
Hello,
You can block downloads in SharePoint Online and Ondrive ,
-Conditional Access Policy
Control access from unmanaged devices:
Microsoft recommends you protect content in SharePoint sites with sensitive and highly-regulated content with device access controls. You do this by creating a policy that specifies the level of protection and the sites to apply the protection to.
- Sensitive sites: Allow browser-only access. This prevents users from editing and downloading files.
- Highly regulated sites: Block access from unmanaged devices.
See "Block or limit access to specific SharePoint site collections or OneDrive accounts" in this article: Control access from unmanaged devices.
- PeterRisingApr 18, 2020MVP
Great answer. Also worth pointing out that Conditional Access requires a minimum of Azure AD Premium P1 licence, and to use session controls you will also need to be licensed for Cloud App Security.