Prevent unmanged device from open protected documents

Question

How I can prevent unmanaged devices from opening protected labeled documents? Is there any way to do that?

Answer 1

@Ahmed Elsayed Riad Abdelhady Elkeay Thank you for reaching out to us and apologies for the delay in reviewing this post. As I understand you are looking to prevent unmanaged devices from opening protected labeled documents, yes this can be achieved via Defender for Cloud Apps.

Microsoft Defender for Cloud Apps access policies enable real-time monitoring and control over access to cloud apps based on user, location, device, and app. You can create access policies for any device, including devices that aren't Hybrid Azure AD Join, and not managed by Microsoft Intune by rolling out client certificates to managed devices or by using existing certificates, such as third-party MDM certificates. For example, you can deploy client certificates to managed devices, and then block access from devices without a certificate.

Reference:
https://learn.microsoft.com/en-us/defender-cloud-apps/access-policy-aad
https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad
https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/microsoft-defender-for-cloud-apps-data-protection-series/ba-p/3681877

Let me know if you have any further queries, feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.