We have enabled SharePoint unmanaged devices setting to 'Block access' from unmanaged devices. I noticed that this automatically creates a conditional access policy that applies to all users, applies to SharePoint cloud app, has only one condition configured with client app set to Browser and session controls set to 'Use app enforced restrictions'. Now this policy works as per its definition i.e. it blocks access within the browser from an untrusted device.
However, what about access from mobile and desktop clients. OneDrive syncs continues to work on unmanaged devices and so does users' access to documents within Office desktop clients.
Are we missing something? Shouldn't the auto generated policy apply to all client types i.e. browser as well as mobile and desktop clients?
