{"id":18919,"date":"2023-09-04T03:16:11","date_gmt":"2023-09-04T03:16:11","guid":{"rendered":"https:\/\/www.insentragroup.com\/gb\/insights\/uncategorized\/how-to-allow-outlook-only-on-mobile-devices-using-microsoft-endpoint-manager\/"},"modified":"2023-09-05T00:42:36","modified_gmt":"2023-09-05T00:42:36","slug":"how-to-allow-outlook-only-on-mobile-devices-using-microsoft-endpoint-manager","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/gb\/insights\/geek-speak\/secure-workplace\/how-to-allow-outlook-only-on-mobile-devices-using-microsoft-endpoint-manager\/","title":{"rendered":"How To Allow Outlook Only On Mobile Devices Using Microsoft Endpoint Manager"},"content":{"rendered":"\n<p>One of our crew, Nick Thomas, wrote a great blog on \u201c<a href=\"https:\/\/www.insentragroup.com\/gb\/insights\/geek-speak\/secure-workplace\/the-ultimate-guide-to-microsoft-intune\/\">The Ultimate Guide to Microsoft Intune<\/a>\u201d. It\u2019s a great read, so if you are new to Microsoft Intune and are interested in how the platform can benefit your organisation, I encourage you to take a look. For those of you who have already adopted Microsoft Intune, please continue reading!\u00a0<\/p>\n\n\n\n<p>Recently, I\u2019ve been involved in large transformation engagement for one of our customers which included the provisioning a greenfield Microsoft 365 tenant and migrating numerous other tenants into the new tenant. There were several considerations to keep in mind within this project, and we touched on every aspect of Microsoft 365 during the engagement. The customer has a strict service catalogue of supported apps within their environment with a mix of end users using either corporate and\/or personal devices. The customer had one essential criteria for their mobile devices \u2013 email access was to be restricted to Microsoft Outlook only.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>RESOLUTION&nbsp;<\/strong>&nbsp;<\/h3>\n\n\n\n<p>To meet this requirement a Conditional Access policy (<a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/conditional-access\/overview\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">What is Conditional Access in Azure Active Directory? &#8211; Microsoft Entra | Microsoft Learn<\/a>) was required to enforce the use of the Microsoft Outlook app on mobile devices.&nbsp;<\/p>\n\n\n\n<p>I have detailed this below so your life will hopefully be made a little easier if you also need to implement this requirement:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Browse to&nbsp; &gt; the <a href=\"https:\/\/intune.microsoft.com\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Microsoft Intune admin centre<\/a> &gt; Endpoint Security &gt; Conditional Access &gt; Policies &gt; + New policy&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"840\" height=\"433\" src=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-3.png\" alt=\"\" class=\"wp-image-18920\" srcset=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-3.png 840w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-3-300x155.png 300w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-3-768x396.png 768w\" sizes=\"(max-width: 840px) 100vw, 840px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Create a new policy, and provide a unique name (e.g.: Exchange Online &#8211; iOS, Android; Mobile Apps; Require approved client app)&nbsp;<\/li>\n\n\n\n<li>Within Cloud apps or actions we want to select \u201cOffice 365 Exchange Online\u201d&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"840\" height=\"433\" src=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-3.png\" alt=\"\" class=\"wp-image-18922\" srcset=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-3.png 840w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-3-300x155.png 300w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-3-768x396.png 768w\" sizes=\"(max-width: 840px) 100vw, 840px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Under Device Platforms, select your supported mobile platforms&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"507\" height=\"470\" src=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-1.png\" alt=\"\" class=\"wp-image-18924\" srcset=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-1.png 507w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-1-300x278.png 300w\" sizes=\"(max-width: 507px) 100vw, 507px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Under Client Apps, select the following&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"573\" height=\"455\" src=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image.png\" alt=\"\" class=\"wp-image-18926\" srcset=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image.png 573w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-300x238.png 300w\" sizes=\"(max-width: 573px) 100vw, 573px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Under Grant, select the following&nbsp;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"283\" height=\"318\" src=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-2.png\" alt=\"\" class=\"wp-image-18928\" srcset=\"https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-2.png 283w, https:\/\/www.insentragroup.com\/gb\/wp-content\/uploads\/sites\/20\/2023\/09\/image-2-267x300.png 267w\" sizes=\"(max-width: 283px) 100vw, 283px\" \/><\/figure>\n\n\n\n<p>It is worth noting, you should only target a specific subset of users for this Conditional Access policy before you roll it out. As once this has been implemented and targeted to all users, any non-compliant users will be forced to install and configure Microsoft Outlook to regain access to their mailbox!&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Wrapping up<\/strong>&nbsp;<\/h3>\n\n\n\n<p>Consider implementing this configuration to initiate the adoption of the Microsoft Outlook app across your mobile devices. This Conditional Access policy can be enhanced to require an applicable Intune app protection policy (<a href=\"https:\/\/learn.microsoft.com\/en-us\/mem\/intune\/apps\/app-protection-policy\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">App protection policies overview &#8211; Microsoft Intune | Microsoft Learn<\/a>) be applied to users to further secure and control organisational data on mobile devices.&nbsp;<\/p>\n\n\n\n<p>Tune in for a future post covering all things Intune app protection policies: how to manage, and report on, organisational data on corporate and personal devices.&nbsp;<\/p>\n\n\n\n<p>If you want to know any further information around adopting Microsoft Intune and how Insentra can help, our <a href=\"https:\/\/www.insentragroup.com\/gb\/services\/microsoft-fasttrack\/\">Microsoft FastTrack services<\/a> may be exactly what you are looking for!\u00a0\u00a0<\/p>\n\n\n\n<p>Hopefully, this has been informative and helpful! If you need any further clarification, or a no thrills chat, <a href=\"https:\/\/www.insentragroup.com\/gb\/contact\/\">contact us<\/a> at Insentra.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>One of our crew, Nick Thomas, wrote a great blog on \u201cThe Ultimate Guide to Microsoft Intune\u201d. It\u2019s a great read, so if you are new to Microsoft Intune and are interested in how the platform can benefit your organisation, I encourage you to take a look. For those of you who have already adopted&hellip; <a class=\"more-link\" href=\"https:\/\/www.insentragroup.com\/gb\/insights\/geek-speak\/secure-workplace\/how-to-allow-outlook-only-on-mobile-devices-using-microsoft-endpoint-manager\/\">Continue reading <span class=\"screen-reader-text\">How To Allow Outlook Only On Mobile Devices Using Microsoft Endpoint Manager<\/span><\/a><\/p>\n","protected":false},"author":137,"featured_media":18930,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[20],"tags":[],"class_list":["post-18919","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-secure-workplace","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/posts\/18919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/users\/137"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/comments?post=18919"}],"version-history":[{"count":6,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/posts\/18919\/revisions"}],"predecessor-version":[{"id":18932,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/posts\/18919\/revisions\/18932"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/media\/18930"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/media?parent=18919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/categories?post=18919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/gb\/wp-json\/wp\/v2\/tags?post=18919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}