This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 80%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGR%3C/text%3E%3C/svg%3E)
I am trying to create a conditional access policy to prevent users on insecure OS versions from accessing company data. I am using the Operating System Version filter and have tried various operators and values for IOS devices but nothing I do seems to have any effect and all devices just get blocked. Is there some limitation on the operatingSystemVersion filter?
As a side note, we do not currently have InTune so I cannot achieve the same goal with Compliance Policies.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 30%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Hi @Glyn Roberts ,
Thanks for reaching out to Microsoft Q&A.
I hope the answer provided by @Vasil Michev was helpful.
If it answered your question, please click "Accept Answer" and indicate "Yes" if the answer was helpful.
If you have any further additional questions, feel free to let us know.
Regards,
Goutam Pratti.
Following up to see if the below answer was helpful. If this answers your query, do click ***Accept Answer*** and ***Yes*** for was this answer helpful. And, if you have any further query do let us know.
Using this filter is only possible against devices Entra "knows" about, it will not work for unregistered/unrecognized devices. See the note here and also the table at the end of the article: https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-condition-filters-for-devices#supported-operators-and-device-properties-for-filters