Jan 26 2022 11:17 PM
Hi
We have Microsoft 365 Business Premium -licenses.
I was wondering whether it is possible to force some users to work via browser only? So that user could not login to Teams Desktop, for example. Or that user can not add his/her account to Outlook Desktop etc.
Jan 26 2022 11:56 PM - edited Jan 26 2022 11:58 PM
SolutionSounds like conditional access :)
You will need to deploy a conditional access rule to prevent Desktop Apps (only select/target desktop apps and maybe exclude the browser :P) to have access to the cloud apps. This policy can be targetted to a selected group of users. And instead of requiring mfa or compliant devices you could just select "Block"
Of course you could also exclude ios/android and only select windows
I did some blogs about ca, maybe it could help you
Device Based Conditional Access and Faking Compliance (call4cloud.nl)
Privileged Access Workstation | PAW | Conditional Access (call4cloud.nl)
Feb 02 2022 01:10 AM
@Rudy_Ooms_MVPRight, of course.. Thank you!
Jan 26 2022 11:56 PM - edited Jan 26 2022 11:58 PM
SolutionSounds like conditional access :)
You will need to deploy a conditional access rule to prevent Desktop Apps (only select/target desktop apps and maybe exclude the browser :P) to have access to the cloud apps. This policy can be targetted to a selected group of users. And instead of requiring mfa or compliant devices you could just select "Block"
Of course you could also exclude ios/android and only select windows
I did some blogs about ca, maybe it could help you
Device Based Conditional Access and Faking Compliance (call4cloud.nl)
Privileged Access Workstation | PAW | Conditional Access (call4cloud.nl)