Chromium Edge and App Enforced Restrictions

%3CLINGO-SUB%20id%3D%22lingo-sub-1127000%22%20slang%3D%22en-US%22%3EChromium%20Edge%20and%20App%20Enforced%20Restrictions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1127000%22%20slang%3D%22en-US%22%3E%3CP%3EHI%3C%2FP%3E%3CP%3EOn%20our%20unmanaged%20devices%20%2Cwe%20run%20a%20conditional%20Access%20policy%20for%20Android%20and%20IOS%20that%20forces%20edge%20to%20be%20used%20when%20accessing%20Office%20365%20from%20a%20browser.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESince%20the%20upgrade%20to%20Chromium%20Edge%2C%20we%20have%20noticed%20that%20when%20accessing%20a%20sharepoint%20site%20it%20is%20possible%20to%20download%20files%20to%20the%20local%20device%20(a%20big%20no%20no%20for%20us).%20We%20have%20our%20tenant%20set%20to%20Unmanaged%20Device%20Access%20to%20%22Allow%20limited%20-%20Web%20access%20only%22.%20and%20run%20a%20conditional%20Access%20policy%20set%20to%20enforce%20App%20restrictions.%3C%2FP%3E%3CP%3EOn%20Windows%20and%20MacOS%20devices%2C%20this%20work%20perfectly%20well%20and%20you%20receive%20the%20warning%20about%20print%20and%20download%20in%20the%20browser.%20And%20all%20Apps%20function%20as%20expected%20when%20installed.%3C%2FP%3E%3CP%3EThis%20worked%20well%20with%20the%20old%20version%20of%20Edge%20and%20indeed%20we%20moved%20to%20enforce%20Edge%20after%20we%20could%20not%20get%20the%20policy%20to%20work%20with%20Chrome%20on%20a%20mobile%20device.%20Does%20anyone%20know%20if%20this%20is%20expected%20or%20have%20we%20missed%20something%20in%20the%20policy%3F%20Any%20help%20would%20be%20appreciated.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1127000%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Contributor

HI

On our unmanaged devices ,we run a conditional Access policy for Android and IOS that forces edge to be used when accessing Office 365 from a browser.

 

Since the upgrade to Chromium Edge, we have noticed that when accessing a sharepoint site it is possible to download files to the local device (a big no no for us). We have our tenant set to Unmanaged Device Access to "Allow limited - Web access only". and run a conditional Access policy set to enforce App restrictions.

On Windows and MacOS devices, this work perfectly well and you receive the warning about print and download in the browser. And all Apps function as expected when installed.

This worked well with the old version of Edge and indeed we moved to enforce Edge after we could not get the policy to work with Chrome on a mobile device. Does anyone know if this is expected or have we missed something in the policy? Any help would be appreciated.

0 Replies