Comments on: Force Outlook on iOS and Android to access the Exchange Online mailbox

By: Demir

Demir — Sat, 13 Aug 2022 22:12:34 +0000

In reply to Marc. Absolutely agree. I hate using outlook app on my iPhone. It works so bad and doesn't separate thread properly as ios mail.

By: xCONFLiCTiONx

xCONFLiCTiONx — Thu, 23 Jun 2022 13:32:43 +0000

Thank you very much for making this tutorial! When I was unable to connect to Exchange with my Android I though I’d broken something and was paranoid. I figured it must be some permission so I searched and came across your tutorial and it worked flawlessly. I am moving tomorrow and don’t need a huge burden of trying to figure out the beast of Microsoft 365 and all there policies right now. Lol

By: Abram Kaufman

Abram Kaufman — Mon, 13 Jun 2022 19:18:16 +0000

If users were already enrolled before pushing out this policy it is my understanding that new Work eMails will not load in the native mail app, but old eMails will still be available. Is there any option from Intune to remove the account and old eMails from enrolled devices to force a cleanup?

By: andrzej

andrzej — Thu, 09 Sep 2021 15:50:29 +0000

In reply to Peter Klapwijk.

In my experience it seems to working.. l tried:
1. User tries to log in using Outlook App in Personal part.
2. Outlook says that user has to install Intune App from Google Play
3. User installs Intune App
4. User run again Outlook in personal part, provides a password then Outlook is asking for register device
5. User click “register” and device is trying to register but without success, it asks for install Microsoft Intune Portal. This point lasts over and over again.

I have CA configured for this user with:
Require device to be marked as compliant
Require approved client app
Require app protection policy
Require all the selected controls

By: Peter Klapwijk

Peter Klapwijk — Tue, 15 Jun 2021 18:56:54 +0000

In reply to Ivan Dretvic. That depends on the use case. You might for example require MFA for an application and every device, except on compliant devices.

By: Peter Klapwijk

Peter Klapwijk — Tue, 15 Jun 2021 18:52:45 +0000

In reply to Saurabh Chhabra. Existing users would most likely get blocked when the access token lifetime is expired.

By: Saurabh Chhabra

Saurabh Chhabra — Thu, 10 Jun 2021 12:42:42 +0000

Thanks for the article. Policy worked perfectly for new logins.
But for the users who were already using native app before policy deployment , they are still able to access mail. How can we block existing native app users.

By: Ivan Dretvic

Ivan Dretvic — Wed, 19 May 2021 07:57:19 +0000

Thanks for the article. I wanted clarity on one point. Whats the advantage of EXCLUDING a compliant device vs GRANTING compliant device as one of the policies?
At face value it feels like the effect is the same.

By: Peter Klapwijk

Peter Klapwijk — Thu, 28 Jan 2021 09:40:53 +0000

In reply to Jim. It needs a broker app to assign the policies/ restrictions, no way around this.

By: Jim

Jim — Fri, 22 Jan 2021 20:22:01 +0000

This seems to work except that it is requiring a certificate on the BYOD device, which I don’t want to require. Is there a way around this?