SOLVED
Home

Teams Conditional Access method of access

%3CLINGO-SUB%20id%3D%22lingo-sub-999134%22%20slang%3D%22en-US%22%3ETeams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-999134%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eis%20it%20possible%20to%20restrict%20access%20to%20the%20webfrontend%20and%20block%20the%20Teams%20Desktop%20app%20or%20Mobile%20App%20on%20specific%20accounts%20or%20devices.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20Greetings%3C%2FP%3E%3CP%3EErik%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-999134%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdministrator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGuest%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUser%20Interface%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-999256%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-999256%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F248724%22%20target%3D%22_blank%22%3E%40ErikVet%3C%2FA%3E%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20is%20the%20problem%20you%20are%20trying%20to%20resolve%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERemoving%20licenses%20from%20users%20will%20stop%20them%20using%20Teams%20both%20internal%20and%20external%20networks.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAndy%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-999259%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-999259%22%20slang%3D%22en-US%22%3EI'm%20not%20sure%20if%20this%20is%20what%20you%20are%20trying%20to%20achieve%20but%20have%20a%20look%20into%20Azure%20conditional%20access%3A%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fskypehybridguy%2F2017%2F08%2F31%2Fmicrosoft-teams-restrict-usage-with-azure-ad-conditional-access%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fskypehybridguy%2F2017%2F08%2F31%2Fmicrosoft-teams-restrict-usage-with-azure-ad-conditional-access%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EI%20hope%20it%20helps.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-999492%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-999492%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F248724%22%20target%3D%22_blank%22%3E%40ErikVet%3C%2FA%3E%2C%20%3CBR%20%2F%3E%3CBR%20%2F%3ESure%2C%20you%20would%20use%20Intune%20to%20block%20the%20app%20store%20and%20permit%20only%20specific%20apps%20on%20the%20mobile.%20You%20could%20use%20applocker%20policies%20to%20prevent%20the%20desktop%20client%20from%20launching%20on%20Windows%2010.%20%3CBR%20%2F%3E%3CBR%20%2F%3ESome%20articles%20to%20help%20you%20would%20be%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fconfiguration%2Fdevice-restrictions-ios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fconfiguration%2Fdevice-restrictions-ios%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fmatt_hinsons_manageability_blog%2F2018%2F08%2F21%2Fblocking-apps-with-intune-and-applocker-csp%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fmatt_hinsons_manageability_blog%2F2018%2F08%2F21%2Fblocking-apps-with-intune-and-applocker-csp%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EHowever%2C%20it%20would%20be%20recommended%20to%20test%20this%20thoroughly%20before%20implementing%20it.%20Since%20Teams%20is%20rolling%20out%20in%20Office%20365%20Pro%20Plus%20you%20could%20also%20consider%20using%20the%20Office%20Deployment%20Tool%20(ODT)%20with%20an%20exclude%20value%20set%20on%20Teams%20to%20deploy%20it%20without%20Teams%20for%20the%20desktop.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20helps%20to%20answer%20your%20question!%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1023795%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Conditional%20Access%20method%20of%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1023795%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F119994%22%20target%3D%22_blank%22%3E%40Ricardo%20Viana%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethx%20...%20that%20worked.%20Conditional%20Access%20was%20the%20right%20hint.%20The%20Last%20time%20I%20looked%20at%20this%20it%20was%20not%20that%20feature%20rich%20I%20tink.%20Many%20Greetings%20Erik%20!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
ErikVet
Occasional Contributor

Hello,

 

is it possible to restrict access to the webfrontend and block the Teams Desktop app or Mobile App on specific accounts or devices.  

 

Many Greetings

Erik

 

4 Replies
Highlighted

Hi @ErikVet ,

 

What is the problem you are trying to resolve? 

 

Removing licenses from users will stop them using Teams both internal and external networks. 

 

Andy

Highlighted
Solution
I'm not sure if this is what you are trying to achieve but have a look into Azure conditional access: https://blogs.technet.microsoft.com/skypehybridguy/2017/08/31/microsoft-teams-restrict-usage-with-az...

I hope it helps.
Highlighted
Hi @ErikVet,

Sure, you would use Intune to block the app store and permit only specific apps on the mobile. You could use applocker policies to prevent the desktop client from launching on Windows 10.

Some articles to help you would be

https://docs.microsoft.com/en-us/intune/configuration/device-restrictions-ios

https://blogs.technet.microsoft.com/matt_hinsons_manageability_blog/2018/08/21/blocking-apps-with-in...

However, it would be recommended to test this thoroughly before implementing it. Since Teams is rolling out in Office 365 Pro Plus you could also consider using the Office Deployment Tool (ODT) with an exclude value set on Teams to deploy it without Teams for the desktop.

Hope that helps to answer your question!

Best, Chris


Best, Chris
Highlighted

@Ricardo Viana 

 

thx ... that worked. Conditional Access was the right hint. The Last time I looked at this it was not that feature rich I tink. Many Greetings Erik !