Contents
Can we lock down access to Office 365 to our corporate devices?
Work in a highly regulated industry and want to restrict access to certain IP addresses? You can do this with Conditional Access. You might want to lock down access to Office 365 to company offices, to corporate devices and enable multi-factor authentication.
What are app enforced restrictions?
App-enforced restrictions are all about ensuring your corporate data doesn’t unintentionally end up on devices over which you have no control. Once enabled, the feature will prevent your users from downloading, printing or syncing SharePoint Online data from your tenant on unmanaged devices.
How do I restrict access to OWA?
In the Add Roles and Features Wizard, under Server Roles, expand Web Server (IIS), then expand Web Server, and then expand Security. Then click the checkbox for IP and Domain Restrictions. Once that installs, open IIS, expand Default Web Site and click on the OWA Virtual Directory.
If you want to expand control of unmanaged devices beyond SharePoint, you can Create an Azure Active Directory conditional access policy for all apps and services in your organization instead. To configure this policy specifically for Microsoft 365 services, select the Office 365 cloud app under Cloud apps or actions.
App protection policies are not supported for other apps that connect to on-premises Exchange or SharePoint services. The important benefits of using App protection policies are the following: Protecting your company data at the app level.
How to control access to SharePoint in Office 365?
Using the Office 365 cloud app helps avoid issues with service dependencies. Go to the Access control page of the SharePoint admin center, and sign in with an account that has admin permissions for your organization.
Is the company phone protected by app protection policy?
The company phone is enrolled in MDM and protected by App protection policies while the personal device is protected by App protection policies only. If you apply a MAM policy to the user without setting the device state, the user will get the MAM policy on both the BYOD device and the Intune-managed device.