Home

How to best deny mail access to third party apps?

Highlighted
Ion Zubia
Contributor

Hello,

 

What would be the best way to deny mail access to third party apps? I'm about to deploy Microsoft Intune to protect our data and I've noticed that when retrieving mail data from a device it will fail to do so with third party apps.

 

Is it possible for a 365 account to be able to access mail only by using Outlook?

 

Thank you,

 

Ion

2 Replies
Highlighted

Hi,

 

I would recommended looking at Conditional Access in Azure AD:
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-azure-po...

 

With Conditional Access you could create policies depending on the platform (Windows, Mac, iOS, Android), what type of application (Exchange Online, SharePoint, etc.) and if the application needs to be an approved application (Microsofts own applications), device is compliance in Intune and/or require MFA.

 

Regards

Highlighted

If you are only concerned about email, you can block specific apps and protocols via the corresponding controls for Set-CasMailbox: https://technet.microsoft.com/en-us/library/bb125264(v=exchg.160).aspx

 

In addition, the mobile device policies can control access for any ActiveSync apps. The newly released Client Access Rules can also help: https://technet.microsoft.com/en-us/library/mt842508(v=exchg.150).aspx

 

Intune or Conditional Access offer additional options, but those come at a price.

Related Conversations
MS Access
jmtreky in Access on
0 Replies
Help! Simple maths not working?
KellieJean-in-Newie in Access on
0 Replies
Multi table query
sundarzee in Access on
3 Replies
Access Switchboars
WilsonRebound in Access on
1 Replies
Access Switchboard
WilsonRebound in Access on
0 Replies