Forum Discussion

PJR_CDF's avatar
PJR_CDF
Iron Contributor
Dec 17, 2019

MDATP Integration - Unsanctioned Apps - Allow for some users?

Hi,   I've reviewed the documentation @ https://docs.microsoft.com/en-us/cloud-app-security/governance-discovery in relation to blocking unsanctioned apps - specifically using MDATP on Win10 endpoi...
Cloud App Security
Cloud Discovery
Danny Kadyshevitch's avatar
Danny Kadyshevitch
Former Employee
Dec 22, 2019

Hi PJR_CDF KrisDeb Dean_Gross,

 

The feature for blocking MCAS unsanctioned apps by leveraging MDATP is now in public preview and can be easily enabled in your tenants. In the following docs https://docs.microsoft.com/en-us/cloud-app-security/wdatp-integration, you'll find more details about it. Please contact me directly with any question you might have.

 

Re scope of control, currently an app will be blocked globally, down the road we will be adding more granular controls, to create a more focused blocking policies.

 

Thanks,

Danny.

  • mandeepdhillon's avatar
    mandeepdhillon
    Copper Contributor
    Feb 01, 2022

    Danny Kadyshevitch hi Danny, have there been any updates in regards to having this functionality in Microsoft Defender for Cloud Apps? Is it still planned or not a priority anymore? Has it already been out and I am unable to find it?

  • KrisDeb's avatar
    KrisDeb
    Iron Contributor
    Jan 24, 2020
    I did the tests, it's working, wow, respect. Thank you.
    • Marc Rodieck's avatar
      Marc Rodieck
      Copper Contributor
      Dec 07, 2020

      KrisDeb I was just curious how you were successful in getting it working with more granular control of the 'Unsanctioned App'? It would be nice to have a 'Exclude' from the Unsanctioned App so certain end users can still use the app. If not, what other ways is this possible?

  • Bill Brennan's avatar
    Bill Brennan
    Copper Contributor
    Jan 02, 2020

    Danny Kadyshevitch,

    You said "down the road we will be adding more granular controls". Is there a public roadmap for this feature? I do not see anything in the Microsoft 365 Roadmap outside of the existing unsanctioned app filtering. Any information would be appreciated.

     

    Thanks,

    Bill

    • Danny Kadyshevitch's avatar
      Danny Kadyshevitch
      Former Employee
      Jan 07, 2020

      Hi Bill Brennan,

       

      This feature is included in our Q1CY20 roadmap which was not yet published.

      I will be able to provide more details on timelines soon.

       

      Thanks,

      Danny.

      • Cristian Calinescu's avatar
        Cristian Calinescu
        Brass Contributor
        Jan 22, 2021

        Danny Kadyshevitch - Are there any updates in regards to the granularity for excluding users or devices from Unsanctioned apps so some users would still be able to access the app and still be blocked for all other users?

        Thank You.

Resources