SharePoint Conditional Access-Use app-enforced Restrictions for browser access

%3CLINGO-SUB%20id%3D%22lingo-sub-488695%22%20slang%3D%22en-US%22%3ESharePoint%20Conditional%20Access-Use%20app-enforced%20Restrictions%20for%20browser%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-488695%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20enabled%20SharePoint%20Conditional%20Access%20%22Use%20app-enforced%20Restrictions%20for%20browser%20access%22%20to%20allow%20users%20can%20view%2Fdownload%20on%20compliant%20device%2C%20and%20Limited%20access%2C%20web-view%20only%20(without%20download)%20on%20unmanaged%20devices%2C%20such%20as%20BYOD%20devices.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20worked%20perfect%20in%20OneDrive%2C%20web-view%20only%20on%20BYOD%20devices%20and%20can%20do%20anything%20on%20compliant%20devices.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20we%20are%20having%20is%20we%20got%20%22access%20denied%22%20on%20BYOD%20devices%20when%20trying%20to%20open%20SharePoint%20sites%20home%20page%2C%26nbsp%3B%20but%20we%20can%20view%20(without%20download)%20some%20subsites'%20document%20libraries%20by%20typing%20URL%20directly.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20no%20idea%20why%20the%20conditional%20access%20policy%20blocks%20everything%20on%20home%20pages%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20advises%3F%20your%20help%20will%20be%20much%20appreciated!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-488695%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdmin%20App%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDeveloper%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Visitor

We enabled SharePoint Conditional Access "Use app-enforced Restrictions for browser access" to allow users can view/download on compliant device, and Limited access, web-view only (without download) on unmanaged devices, such as BYOD devices. 

 

It worked perfect in OneDrive, web-view only on BYOD devices and can do anything on compliant devices. 

 

The issue we are having is we got "access denied" on BYOD devices when trying to open SharePoint sites home page,  but we can view (without download) some subsites' document libraries by typing URL directly. 

I have no idea why the conditional access policy blocks everything on home pages?

 

Any advises? your help will be much appreciated!

 

Thanks,