Introduction #
Users will be blocked from accessing company resources when the device type is unknown or unsupported. This means, if the device is not recognised as running one of the operating systems listed under Excluded device platforms the sign in to Azure AD will be blocked and unable to access any resources, including Office 365.
Basics #
Template Category: Devices
Assignments #
Users and Groups
Includes | – All users |
Excluded | – None |
Cloud Apps or actions
Cloud Apps | – All Apps |
Conditions #
Device Platforms
Included device platforms | – Any device |
Excluded device platforms | – Android – iOS – Windows – MacOS |
Access Controls #
Grant | – Require device to be marked as compliant Or – Require hybrid Azure AD joined device |
Troubleshooting #
Having difficulty applying this policy? Refer to 1032: ConditionalActionPolicy validation failed due to BlockEveryonePolicy