Condtional access for MAM outlook only?

[Daniel Schmidt]

Ok, so I am trying to juggle the Conditional Access rules so that only MAM Enabled Email apps work (Outlook, Nine Work Intune etc) and only need to have Company portal installed but not enrolled.  I keep getting prompted to enroll in Intune.  Any thoughts on the correct rule?

Thank you!

[#2]

@Daniel Schmidt could you show message you are getting?
You might be asked to register device on Android, but it is not equal to enroll. 

If CA Policy configured correctly (only approved app is required), you should not be asked to enroll device.

[#3]

@Alexander Vanyurikhin It is a known issue that they will be prompted to enroll... they don't have to but are prompted. Here is a user voice item on the topic, I think there are more.. https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/33635617-add-a-policy-to-preve...

Regards,
Jörgen