New mobile iOS device not quarantined

%3CLINGO-SUB%20id%3D%22lingo-sub-899371%22%20slang%3D%22en-US%22%3ENew%20mobile%20iOS%20device%20not%20quarantined%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-899371%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Guys%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENeed%20some%20advise%20or%20assistance.%20Looked%20online%20and%20I%20could%20not%20find%20any%20info%20in%20relation%20to%20this%20exact%20issue.%20We%20have%20a%20user%20who%20had%20her%20old%20phone%20quarantined%20in%20O365.%20It%20was%20unblocked%20and%20access%20was%20granted%20to%20her%20mobile%20device.%201%20week%20later%20on%20the%20client%20has%20changed%20her%20mobile%20device%20and%20she%20managed%20to%20get%20her%20email%20setup%20on%20Outlook.%20Her%20new%20device%20was%20not%20quarantined.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20anyone%20assist%3F%20I%20had%20thought%20all%20new%20devices%20are%20quarantined%20and%20its%20device%20level%20not%20user%20account%20level.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3CP%3EAaron%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-899371%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-899831%22%20slang%3D%22en-US%22%3ERe%3A%20New%20mobile%20iOS%20device%20not%20quarantined%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-899831%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20default%20setting%20is%20to%20allow%20all%20devices%2C%20you%20must%20change%20it%20to%20quarantine%20if%20you%20don't%20want%20automatic%20approval.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-899908%22%20slang%3D%22en-US%22%3ERe%3A%20New%20mobile%20iOS%20device%20not%20quarantined%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-899908%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EQuarantine%20has%20been%20enabled%20for%20the%20tenant.%20The%20user's%20old%20device%20was%26nbsp%3Bquarantined%20and%20then%20released%2C%20so%20when%20they%20had%20a%20new%20device%20they%20expected%20the%20same%20behaviour%20-%20however%20the%20new%20device%20never%20got%26nbsp%3Bquarantined%20and%20the%20user%20was%20able%20to%20login%20to%20Outlook%20client%20to%20access%20emails.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-901286%22%20slang%3D%22en-US%22%3ERe%3A%20New%20mobile%20iOS%20device%20not%20quarantined%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-901286%22%20slang%3D%22en-US%22%3E%3CP%3EPerhaps%20there's%20a%20device%20access%20rule%20in%20place%3F%20Hard%20to%20tell%20without%20being%20able%20to%20see%20your%20setup.%20In%20any%20case%2C%20you%20can%20easily%20test%20it%20with%20a%20spare%20device.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-905434%22%20slang%3D%22en-US%22%3ERe%3A%20New%20mobile%20iOS%20device%20not%20quarantined%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-905434%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20believe%20this%20is%20possible%20there%20might%20be%20a%20device%20rule.%20How%20can%20i%20check%20that%20if%20you%20do%20not%20mind%20me%20asking%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20client%20with%20the%20same%20setup%20on%20their%20O365%20estate%20had%20the%20same%20issue.%20The%20client%20device%20was%20initially%20quarantined%20upon%20changing%20his%20mobile%20device%20to%20a%20new%20Android%20device%20he%20was%20able%20to%20setup%20his%20O365%20account%20with%20no%20restrictions%20on%20the%20new%20device.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-906075%22%20slang%3D%22en-US%22%3ERe%3A%20New%20mobile%20iOS%20device%20not%20quarantined%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-906075%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20all%20these%20cases%20using%20the%20Outlook%20app%3F%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20check%20for%20Device%20Access%20Rules%2C%20follow%20the%20steps%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Foutlook-for-ios-and-android%2Fsecure-outlook-for-ios-and-android%23option-1-block-all-email-apps-except-outlook-for-ios-and-android%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Foutlook-for-ios-and-android%2Fsecure-outlook-for-ios-and-android%23option-1-block-all-email-apps-except-outlook-for-ios-and-android%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi Guys,

 

Need some advise or assistance. Looked online and I could not find any info in relation to this exact issue. We have a user who had her old phone quarantined in O365. It was unblocked and access was granted to her mobile device. 1 week later on the client has changed her mobile device and she managed to get her email setup on Outlook. Her new device was not quarantined. 

 

Can anyone assist? I had thought all new devices are quarantined and its device level not user account level.

 

Regards

Aaron

5 Replies
Highlighted

The default setting is to allow all devices, you must change it to quarantine if you don't want automatic approval.

Highlighted

@Vasil Michev 

 

Quarantine has been enabled for the tenant. The user's old device was quarantined and then released, so when they had a new device they expected the same behaviour - however the new device never got quarantined and the user was able to login to Outlook client to access emails.

Highlighted

Perhaps there's a device access rule in place? Hard to tell without being able to see your setup. In any case, you can easily test it with a spare device.

Highlighted

@Vasil Michev 

 

I believe this is possible there might be a device rule. How can i check that if you do not mind me asking?

 

Another client with the same setup on their O365 estate had the same issue. The client device was initially quarantined upon changing his mobile device to a new Android device he was able to setup his O365 account with no restrictions on the new device.

 

Thanks in advance

Highlighted

Are all these cases using the Outlook app? 

 

To check for Device Access Rules, follow the steps here: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-...