MCAS - Prevent upload of unlabeled files in Teams Desktop app

%3CLINGO-SUB%20id%3D%22lingo-sub-2173563%22%20slang%3D%22en-US%22%3EMCAS%20-%20Prevent%20upload%20of%20unlabeled%20files%20in%20Teams%20Desktop%20app%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2173563%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20trying%20to%20implement%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fproxy-intro-aad%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Ethis%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22mikkele_0-1614582210409.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F258903i4790570B51635592%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22mikkele_0-1614582210409.png%22%20alt%3D%22mikkele_0-1614582210409.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20only%20way%20I%20found%20to%20make%20it%20work%20in%20a%20Session%20Policy%20is%20to%20use%20the%20negation%20and%20select%20all%20existing%20labels%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22mikkele_0-1614582850159.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F258906i47394A74D91CB6C2%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22mikkele_0-1614582850159.png%22%20alt%3D%22mikkele_0-1614582850159.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20leave%20the%20file%20filter%20equals%20empty%20(don't%20select%20anything)%20then%20the%20filter%20is%20not%20applied%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EIs%20there%20a%20way%20to%20apply%20this%20also%20to%20the%20Teams%20desktop%20app%3F%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3ESession%20policies%20are%20only%20applied%20to%20web%20sessions%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22mikkele_0-1614583158005.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F258908i6271A877EC3BDF48%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22mikkele_0-1614583158005.png%22%20alt%3D%22mikkele_0-1614583158005.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EAccess%20policies%20will%20prevent%2Fblock%20access%20altogether%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2173563%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

I'm trying to implement this

mikkele_0-1614582210409.png

 

The only way I found to make it work in a Session Policy is to use the negation and select all existing labels

mikkele_0-1614582850159.png

 

If I leave the file filter equals empty (don't select anything) then the filter is not applied

 

Is there a way to apply this also in desktop apps like Teams, Word etc.?

Session policies are only applied to web sessions

mikkele_0-1614583158005.png

Access policies will prevent/block access altogether 

 

 

0 Replies