We are in the process of testing policies to restrict unmanaged device access to Microsoft 365. We have implemented Session policies in Defender for Cloud Apps to block cut/copy, print and download activities and these are confirmed working. The only issue we are experiencing is the user can still download the file if they click on the Editing drop down in Word/Excel Online and click Open in Desktop.

The business is not ready to outright block all unmanaged device access.

Any help appreciated.

​We are in the process of testing policies to restrict unmanaged device access to Microsoft 365. We have implemented Session policies in Defender for Cloud Apps to block cut/copy, print and download activities and these are confirmed working. The only issue we are experiencing is the user can still download the file if they click on the Editing drop down in Word/Excel Online and click Open in Desktop. The business is not ready to outright block all unmanaged device access. Any help appreciated.  Read More

​