Our goal is to establish MDM using Intune with Exchange OnPremise and use only Outlook for Android and iOS as mail client on mobile devices. OnPrem enviroment is Adctive Directory DFF/FFF Windows Server 2012R2, Exchange Server 2016 CU21, domain is synced wth Azure AD Connect using password hash synchonization. All users have Microsoft 365 Business Premium Licences. HMA is configured, Exchange Hybrid established, conditional access and app protection policies are configured.
When user enroll to Intune using Company portal, it works as expected. But, when we want to block other, unmanaged devices managed devices are also blocked. We try to block unmanaged devices with those PS commands in Exchange OnPrem
Set-ActiveSyncOrganizationSettings -DefaultAccessLevel Block
New-ActiveSyncDeviceAccessRule -Characteristic DeviceModel -QueryString "Outlook for iOS and Android" -AccessLevel Allow
Need help to achieve goal – block unmanaged deviced, allow managed devices with Outlook for Android & IOS.