Stop downloads on unmanaged devices - conditional access

Question

Hi all,

I want to set a block policy on downloads from sharepoint and onedrive for unmanaged devices - personal or not within the tenant.

Answer 1

@Aran Billen,Thanks for posting in Q&A.

From your description, I know you want to set a block policy on downloads from SharePoint and OneDrive for unmanaged devices.

Based on my researching, we can create a conditional access policy to block downloading from SharePoint and OneDrive for unmanaged devices.

Here are some links with useful information you can refer.

https://learn.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices

https://www.petervanderwoude.nl/post/conditional-access-and-blocking-downloads/

Non-official, just for reference.

Hope above information can be helpful.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

For that, you'll need to use Purview / Defender for Cloud Apps - as described in the MS Learn https://learn.microsoft.com/en-us/microsoft-365/solutions/manage-devices-with-intune-dlp-mip?view=o365-worldwide

https://learn.microsoft.com/en-us/purview/endpoint-dlp-getting-started?view=o365-worldwide

---

hth

Marcin