SOLVED

Forcing user to browser only (M365 BP)

Brass Contributor

Hi

 

We have Microsoft 365 Business Premium -licenses.

 

I was wondering whether it is possible to force some users to work via browser only? So that user could not login to Teams Desktop, for example. Or that user can not add his/her account to Outlook Desktop etc.

2 Replies
best response confirmed by Iivo Kerminen (Brass Contributor)
Solution

Sounds like conditional access :)
You will need to deploy a conditional access rule to prevent Desktop Apps (only select/target desktop apps and maybe exclude the browser :P) to have access to the cloud apps. This policy can be targetted to a selected group of users. And instead of requiring mfa or compliant devices you could just select "Block"

Of course you could also exclude ios/android and only select windows

 

I did some blogs about ca, maybe it could help you 

Device Based Conditional Access and Faking Compliance (call4cloud.nl)

Privileged Access Workstation | PAW | Conditional Access (call4cloud.nl)

@Rudy_Ooms_MVPRight, of course.. Thank you!

1 best response

Accepted Solutions
best response confirmed by Iivo Kerminen (Brass Contributor)
Solution

Sounds like conditional access :)
You will need to deploy a conditional access rule to prevent Desktop Apps (only select/target desktop apps and maybe exclude the browser :P) to have access to the cloud apps. This policy can be targetted to a selected group of users. And instead of requiring mfa or compliant devices you could just select "Block"

Of course you could also exclude ios/android and only select windows

 

I did some blogs about ca, maybe it could help you 

Device Based Conditional Access and Faking Compliance (call4cloud.nl)

Privileged Access Workstation | PAW | Conditional Access (call4cloud.nl)

View solution in original post