How to Configure Exchange on-premises Access with Intune

1. Go to the Azure portal, and sign in with your credentials.
2. After you've successfully signed in, you see the Azure Dashboard.
3. Choose All services from the left menu, then type Intune in the text box filter.
4. Choose Intune, you see the Intune Dashboard.
5. Choose On-premises access. The On-premises access pane shows the status of the conditional access policy and the devices that are affected by it.
6. Under Manage, choose Exchange on-premises access.
7. On the Exchange on-premises access pane, choose Yes to enable Exchange on-premises access control.
8. Under Assignment, choose Groups Included. Use the security user group that should have conditional access applied to it. This action would require the users to enroll their devices in Intune and be compliant with the compliance profiles.
9. If you want to exclude a certain groups of users, you can do so by choosing Groups Excluded and selecting a user group that you want to be exempt from requiring device enrollment and compliance.
10. Under Settings, choose User notifications to modify the default email message. This message is sent to users if their device is not compliant and they want to access Exchange on-premises. The message template uses Markup language. You can also see the preview of how the message looks as you type.
11. On the Advanced Exchange Active Sync access settings pane, set the global default rule for access from devices that are not managed by Intune, and for platform-level rules as described in the next two steps.
12. Under Device platform exceptions, choose Add to specify the platforms. If the unmanaged device access setting is set to blocked, devices that are enrolled and compliant are allowed even if there is a platform exception to block. Choose Ok to save the settings.
13. On the On-premises pane, click Save to save the conditional access policy.