Is there a policy to enforce iOS updates on personal devices for company data access without full MDM control?

Question

Our company wants users to access Outlook and/or Teams on their personal devices, but without full MDM control over their personal devices. How can we ensure that the personal device has the latest iOS before accessing company data on their phones? We are trying to avoid users with compromised devices from accessing valuable company data. Are there any policies that we can enforce to ensure that devices must be updated to access company data while still leaving device control to the user?

I have explored MAM and MAM-WE, but these approaches only allow for settings for the app to be met, rather than requiring the device itself to be up to date. Any help is appreciated.

Answer 1

@Madison544, Thanks for posting in Q&A.

From your description, I know you want to create a policy to enforce lasted iOS on personal devices for company data access without full MDM control.

Based on my research, we can create an app protection policy for both Outlook and Teams, and in the configuration of Condition launch session, we can configure the Max OS version or Min OS version to restrict the required OS version access the apps.

https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios#conditional-launch

Hope it will help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.