Managed Device only allowed to download files from M365 when using MS Edge

[Cameron_Stephens]

I have a conditional access rule setup and created a session policy to block unmanaged devices from downloading from M365. This is working as planned on unmanaged devices, for all browsers, but on a managed, Hybrid Azure AD joined device I have to use MS Edge to successfully download files. If I use Firefox or Chrome I am blocked as if I am on an unmanaged device.

I haven't found any mention of this limitation, so am I doing something wrong?

[#2 · Accepted solution]

Hi @Cameron_Stephens,

This can typically happen because AAD doesn’t pick up the device as managed. For Chrome make sure to have the windows 10 extension installed and that the user is signed in.

[#3]

Thanks @Keith_Fleming, installing the Windows Accounts Chrome extension allows me to download files via Chrome.