SOLVED
Home

Teams Conditional Access method of access

%3CLINGO-SUB%20id%3D%22lingo-sub-999134%22%20slang%3D%22en-US%22%3ETeams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-999134%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eis%20it%20possible%20to%20restrict%20access%20to%20the%20webfrontend%20and%20block%20the%20Teams%20Desktop%20app%20or%20Mobile%20App%20on%20specific%20accounts%20or%20devices.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20Greetings%3C%2FP%3E%3CP%3EErik%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-999134%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdministrator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGuest%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUser%20Interface%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-999256%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-999256%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F248724%22%20target%3D%22_blank%22%3E%40ErikVet%3C%2FA%3E%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20is%20the%20problem%20you%20are%20trying%20to%20resolve%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERemoving%20licenses%20from%20users%20will%20stop%20them%20using%20Teams%20both%20internal%20and%20external%20networks.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAndy%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-999259%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-999259%22%20slang%3D%22en-US%22%3EI'm%20not%20sure%20if%20this%20is%20what%20you%20are%20trying%20to%20achieve%20but%20have%20a%20look%20into%20Azure%20conditional%20access%3A%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fskypehybridguy%2F2017%2F08%2F31%2Fmicrosoft-teams-restrict-usage-with-azure-ad-conditional-access%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fskypehybridguy%2F2017%2F08%2F31%2Fmicrosoft-teams-restrict-usage-with-azure-ad-conditional-access%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EI%20hope%20it%20helps.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-999492%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-999492%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F248724%22%20target%3D%22_blank%22%3E%40ErikVet%3C%2FA%3E%2C%20%3CBR%20%2F%3E%3CBR%20%2F%3ESure%2C%20you%20would%20use%20Intune%20to%20block%20the%20app%20store%20and%20permit%20only%20specific%20apps%20on%20the%20mobile.%20You%20could%20use%20applocker%20policies%20to%20prevent%20the%20desktop%20client%20from%20launching%20on%20Windows%2010.%20%3CBR%20%2F%3E%3CBR%20%2F%3ESome%20articles%20to%20help%20you%20would%20be%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fconfiguration%2Fdevice-restrictions-ios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fconfiguration%2Fdevice-restrictions-ios%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fmatt_hinsons_manageability_blog%2F2018%2F08%2F21%2Fblocking-apps-with-intune-and-applocker-csp%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fmatt_hinsons_manageability_blog%2F2018%2F08%2F21%2Fblocking-apps-with-intune-and-applocker-csp%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EHowever%2C%20it%20would%20be%20recommended%20to%20test%20this%20thoroughly%20before%20implementing%20it.%20Since%20Teams%20is%20rolling%20out%20in%20Office%20365%20Pro%20Plus%20you%20could%20also%20consider%20using%20the%20Office%20Deployment%20Tool%20(ODT)%20with%20an%20exclude%20value%20set%20on%20Teams%20to%20deploy%20it%20without%20Teams%20for%20the%20desktop.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20helps%20to%20answer%20your%20question!%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1023795%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1023795%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F119994%22%20target%3D%22_blank%22%3E%40Ricardo%20Viana%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethx%20...%20that%20worked.%20Conditional%20Access%20was%20the%20right%20hint.%20The%20Last%20time%20I%20looked%20at%20this%20it%20was%20not%20that%20feature%20rich%20I%20tink.%20Many%20Greetings%20Erik%20!%3C%2FP%3E%3C%2FLINGO-BODY%3E
ErikVet
Occasional Contributor

Hello,

 

is it possible to restrict access to the webfrontend and block the Teams Desktop app or Mobile App on specific accounts or devices.  

 

Many Greetings

Erik

 

4 Replies

Hi @ErikVet ,

 

What is the problem you are trying to resolve? 

 

Removing licenses from users will stop them using Teams both internal and external networks. 

 

Andy

Solution
I'm not sure if this is what you are trying to achieve but have a look into Azure conditional access: https://blogs.technet.microsoft.com/skypehybridguy/2017/08/31/microsoft-teams-restrict-usage-with-az...

I hope it helps.
Hi @ErikVet,

Sure, you would use Intune to block the app store and permit only specific apps on the mobile. You could use applocker policies to prevent the desktop client from launching on Windows 10.

Some articles to help you would be

https://docs.microsoft.com/en-us/intune/configuration/device-restrictions-ios

https://blogs.technet.microsoft.com/matt_hinsons_manageability_blog/2018/08/21/blocking-apps-with-in...

However, it would be recommended to test this thoroughly before implementing it. Since Teams is rolling out in Office 365 Pro Plus you could also consider using the Office Deployment Tool (ODT) with an exclude value set on Teams to deploy it without Teams for the desktop.

Hope that helps to answer your question!

Best, Chris


Best, Chris

@Ricardo Viana 

 

thx ... that worked. Conditional Access was the right hint. The Last time I looked at this it was not that feature rich I tink. Many Greetings Erik !

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies