Forum Discussion
MyronHelgering
Sep 26, 2023Brass Contributor
My favorite Conditional Access policies to implement (part one) - Blog Post
A bit of light reading today, but still an important topic worth discussing: Conditional Access! If you’re not very experienced with implementing these policies, this post might help set you up in th...
MyronHelgering
Brass Contributor
Yeah I understand what you mean. That is unfortunately the disadvantage working with the Microsoft Teams default permission groups while adding guests to a Team.
You will have to work with the SharePoint advanced permissions and add the guests that way, but then the guests won't have access to the Teams anymore, or you could create a specific library or private channel within a team where the files will reside where guests will have view permissions (set from the SharePoint permissions).
You will have to work with the SharePoint advanced permissions and add the guests that way, but then the guests won't have access to the Teams anymore, or you could create a specific library or private channel within a team where the files will reside where guests will have view permissions (set from the SharePoint permissions).
colonel_claypoo
Sep 29, 2023Iron Contributor
Yeah, I agree. No bueno in maintaining user permission management in two different apps. Thanks and keep up the good work.
- MyronHelgeringOct 02, 2023Brass ContributorNo problem, good luck!
- colonel_claypooOct 02, 2023Iron ContributorBummer on the one hand but good news for the Future. Thanks for pointing that out and writing about 👍
- MyronHelgeringOct 02, 2023Brass Contributor
colonel_claypoo that is correct, session policies are meant to be for web sessions only! I would advise you to block access from desktop apps for unmanaged devices with Conditional Access or Access Policies. This way people are only able to work from the web, with the cut/copy/print restrictions active.
Another possibility is looking at MAM for Windows, with this you are able to set the same restrictions on an application level for desktop apps. Unfortunately there is no support yet for Office Desktop Apps besides Microsoft Edge at the moment. If you wanna know how it works, I'll leave a link here to my blog about this subject: First Look at MAM for Windows (myronhelgering.com) - colonel_claypooOct 02, 2023Iron ContributorHey,
one thing I noticed is that using such a policy to restrict copy/paste/print seems to only work for the Word browser app, for example. Once a user clicks to edit the file in Word Desktop it stops working. Can you confirm that? Thanks. - MyronHelgeringSep 29, 2023Brass ContributorNo problem have a good day!