Restricting Download to Personal or Unmanaged Devices

Prevent data loss to untrusted devices. In this video, I show you how to configure a Microsoft 365 tenant to prevent users from downloading corporate documents to personal or unmanaged devices when they are using Exchange Online. This requires you to set up a conditional access policy and run a few powershell cmdlets.

[gsjohnson]

I've followed this tutorial (and many others!) and I still end up with the same issue. The issue is that this policy applies to ALL devices, regardless of whether they're compliant or not. I'm pulling my hair out.

[jimparsons]

Question for clarification - You showed 2 parts to the Block download, a policy and a PowerShell "ReadOnly" command. Does the PowerShell "RO" enforce RO for all Web Application users or does it work together with the CA policy which is assigned to a specific user/group?

[saurabhvkadam]

How to this in modern UI example microsoft entra

[khalid]

The security block is faded for me and I can’t click it

[ThePranshuarora]

Is this sort of configuration also possible when the Exchange is on-premise 2016? I am planning to build the Intune exchange Connector, but not sure how to enforce the DLP. Please share your viewpoint.

[fnd]

Unless I'm missing something this is barely usable in the real world if it requires any agent to be installed on an employee's personal device.

[EarthLover]

How about the outlook thick client - How to block download from outlook thick client