We are considering a CAP that blocks access to Sharepoint/OneDrive from non-Compliant devices via a Client Application, to prevent Sync of documents to unencrypted devices.
We have a concern that this policy would block collaboration with third parties using Teams, as they would be unable to comply with the CAP (and probably be unable to authorise the InTune agent on their device).
We intend only to block Sync activities, but our testing indicates that this policy blocks access by Teams to the channel. This doesnt seem like an unusual requirement and we want to extend our use of Teams for third party collaboration.
Is there any way of either registering a third party device as 'trusted' for InTune purposes without downloading the InTune agent, or designing a CAP that blocks only the Sync operations of Sharepoint/OneDrive, so that Teams is unaffected ?
