Skip to Content
Communication Square LLC Help Center

Enforcing Device Compliance for Exchange Cloud App Usage

Written May 2018. Microsoft changes these admin screens often, so the screenshots below may not match what you see today. The sequence of steps is usually still correct — if something looks wrong, tell us and we'll update it.

Configuring Conditional Access to Enforce Device Enrollment

Screenshot no longer available from its original source.

  1. Within the Microsoft Azure portal go to Intune > Conditional access. Select Policies and click the “+New Policy” button.Screenshot no longer available from its original source.
  2. Give the new policy a name. For this blog I will give it the name : CA-ExchangeOnline-EAS
  3. Under Assignment click Users and groups and select an Azure AD security group if you want to apply this policy to a selected group of users (optional) Click DoneScreenshot no longer available from its original source.
  4. Click on Cloud apps, click Select apps in search for Office 365 Exchange Online. Click Select and DoneScreenshot no longer available from its original source.
  5. Select Conditions, and then choose for Client apps. This time select Exchange ActiveSync. Click Done twice.Screenshot no longer available from its original source.
  6. Under Access controls select Grant. On the right hand side of the screen click Grant access and select Require device to be marked as compliant. Click on Select in the bottom of the screen.Screenshot no longer available from its original source.
  7. Make sure that Enable policy is set to On and click on CreateScreenshot no longer available from its original source.

Last updated on

Related articles