with a 365 account is there a way to only access email while on work pc?

%3CLINGO-SUB%20id%3D%22lingo-sub-900192%22%20slang%3D%22en-US%22%3Ewith%20a%20365%20account%20is%20there%20a%20way%20to%20only%20access%20email%20while%20on%20work%20pc%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-900192%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20a%20user%20that%20only%20wants%20email%20to%20be%20able%20to%20be%20accessed%20while%20in%20the%20office%20not%20out%20side%20the%20office%20more%20specifically%20just%20the%20users%20computer.%20Is%20there%20a%20way%20to%20lock%20365%20down%20so%20email%20can%20only%20be%20accessed%20in%20the%20in%20the%20office%3F%20or%20just%20the%20users%20computer%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-900192%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-900343%22%20slang%3D%22en-US%22%3ERe%3A%20with%20a%20365%20account%20is%20there%20a%20way%20to%20only%20access%20email%20while%20on%20work%20pc%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-900343%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F422326%22%20target%3D%22_blank%22%3E%40Andre_Tampapc%3C%2FA%3E%26nbsp%3B-%20read%20this%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fcore.co.uk%2Fblog%2Frestricting-access-office-365%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3ERestrict%20access%20to%20Office%20365%20with%20Microsoft's%20Conditional%20Access%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-901354%22%20slang%3D%22en-US%22%3ERe%3A%20with%20a%20365%20account%20is%20there%20a%20way%20to%20only%20access%20email%20while%20on%20work%20pc%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-901354%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20question%20is%20how%20do%20you%20define%20%22the%20office%22%20in%20a%20way%20that%20Microsoft%20services%20can%20understand%3F%26nbsp%3B%20One%20method%20is%20by%20IP%2Frange%2C%20which%20you%20can%20use%20to%20configure%20%22trusted%20locations%22%20and%20set%20up%20restrictions%20(CA%20policy%20as%20mentioned%20above%2C%20Client%20Access%20Rules%20if%20you%20don't%20have%20a%20P1%20license%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Fclient-access-rules%2Fclient-access-rules%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Fclient-access-rules%2Fclient-access-rules%3C%2FA%3E).%20Limiting%20to%20a%20specific%20device%20is%20a%20bit%20more%20complicated%2C%20as%20you%20cannot%20specify%20a%20device%20directly%2C%20but%20you%20can%20restrict%20access%20to%20just%20devices%20that%20are%20Hybrid%20AD%20joined%20and%2For%20compliant.%20Read%20the%20links%20above%20for%20more%20info.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

I have a user that only wants email to be able to be accessed while in the office not out side the office more specifically just the users computer. Is there a way to lock 365 down so email can only be accessed in the in the office? or just the users computer?

2 Replies

The question is how do you define "the office" in a way that Microsoft services can understand?  One method is by IP/range, which you can use to configure "trusted locations" and set up restrictions (CA policy as mentioned above, Client Access Rules if you don't have a P1 license: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/client-access-rules/...). Limiting to a specific device is a bit more complicated, as you cannot specify a device directly, but you can restrict access to just devices that are Hybrid AD joined and/or compliant. Read the links above for more info.