Forum Discussion
how to block the Outlook desktop app while allow them use the Outlook On the Web (OWA)
You can use a Conditional Access policy to block desktop apps.
Assignments
Conditions > Client apps > Mobile apps and desktop clients
Grant
Block Access
You could try to target Exchange online as the cloud app and as client app conditions the mobile and desktop clients apps and configure it on block (exclude compliant devices)
Just curious but why only blocking outlook? 🙂
Thanks for the suggestion.
I am not sure how to use block access and exclude compliant devices.
I was able to target "Office 365 Exchange Online". Under conditions the device platform checked Windows and Mac and on client Apps checked all but the Browser option. For Grant, I checked "Require device to be marked as compliant". This way, it limits Outlook from opening and it does show the message about enrolling the device. However, it also limits any other O365 App.
A current requirement from InfoSec is not allow local Outlook data (OSTs or PSTs) on personal devices. So, my current thinking is to allow Outlook online on personal devices and block the desktop client.
Regards.
- I would recommend just to make sure users can only access your office365 data when the device is compliant.. when not ...they must use the browser... Plain and easy :)... Make sure you setup mcas / defender for cloud apps to limit the download/copy paste etc or label documents at download
And when all your devices are managed you can do anything you want with them to get compliant with infosec rules- Thanks for your suggestion.
Best Regards!
