Download and use office apps only from company portal

Weghofer Thomas 20 Reputation points
2025-02-11T14:49:28.2733333+00:00

Hi,

is there a possibility (policy at Intune etc.) that people are not allowed to login to an office app (Outlook, Teams...) when the app is downloaded directly from the app-store/play-store?

My goal is that login to these apps is only possible, if its downloaded from the company portal. This policy should be valid for all users of our domain.

Thanks and regards,

Thomas

Microsoft 365 and Office | Install, redeem, activate | For business | Windows
Microsoft Security | Intune | Other
{count} votes

Accepted answer
  1. Crystal-MSFT 53,991 Reputation points Microsoft External Staff
    2025-02-12T02:01:42.86+00:00

    @Weghofer Thomas, Thanks for posting in Q&A. Based on my researching, I didn't find there's policy in Intune to block user to login to an office app when the app is downloaded directly from the app-store/play-store. In General, deploy Outlook to Android device in Intune is also via Google Play store. It is hard to separate.

    https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-platform-android#deploy-apps

    https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-platform-ios-ipados#deploy-apps

    As another option, we can block user to access Apple store to prevent the download. For Automated device enrollment (supervised), there's a setting named "Block App store:" which can block user to access to the Apple App Store. Here is a link with more details.

    https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-ios#settings-apply-to-automated-device-enrollment-supervised

    In Android, there's a setting named "Allow access to all apps in Google Play Store", when it is configured as Not configured, all apps not explicitly allowed for the user will be removed from the device.

    https://techcommunity.microsoft.com/blog/intunecustomersuccess/support-tip-removing-and-preventing-the-use-of-applications-on-iosipados-and-and/3815452

    To control app sign in access, condition access policy which Rahul mentioned is a good option. You can go through it to see if it can give you some thoughts.

    https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview

    Hope the above information can help.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.