question

johnjohn-0472 avatar image
0 Votes"
johnjohn-0472 asked EchoDu-MSFT commented

To use this setting, get a subscription to Enterprise Mobility + Security and assign a license to yourself. Manage subscriptions

I want to set un-managed devices control policy >> but when i tried to do so i got this error:-


To use this setting, get a subscription to Enterprise Mobility + Security and assign a license to yourself. Manage subscriptions


as follow:-

109894-unmanaged.png


any advice?


office-sharepoint-online
unmanaged.png (76.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
1 Vote"
michev answered EchoDu-MSFT commented

This setting depends on Conditional access policies, which in turn require additional licensing. Although I dont think Microsoft enforced this previously, at least when it comes to the SPO integration/unmanaged devices policy. In any case, you can do it with a trial Azure AD P1 or EMS subscription: https://go.microsoft.com/fwlink/p/?LinkID=2077039&clcid=0x463&culture=en-us&country=af

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@michev thanks for the reply, but i have these additional questions:-

Question-1) Should this license be granted to all users or to the office 365 admin only (who will set this access policy)?


Question-2) So if i define to block-access on unmanaged devices.. and a user with E1 license access the site from unmanaged device then his access will not be blocked?

Question-3) what about external users whose does not have any license inside our tenant, will they bypass this access policy?

0 Votes 0 ·

Hi @johnjohn-0472 ,

Grant Office 365 admin or SharePoint administrator "Enterprise Mobility + Security" license.

Regardless of whether you have an E1 license or an external user, as long as you are restricted by a Global administrator or a SharePoint administrator(have "Enterprise Mobility + Security" license) , you will be blocked.

Thanks,
Echo Du

0 Votes 0 ·

The license is only needed to enable the configuration of this feature, once configured it should work regardless of which license the end user has.

0 Votes 0 ·

Hi @johnjohn-0472 ,

Is there anything else I can help with regarding this issue?

You can comment us at any time and we will continue to follow up.

Thanks,
Echo Du

0 Votes 0 ·