Conditional Access Block Download Attachment

Question

Hello , I trying for a few days to enable correct a Conditional Access Policy that blocks attachments to download.

I managed to block attachment in owa but still have the option to save it to one drive.

In windows i have the option to save it locally or in OneDrive. In mobile app i have the option to save it to device.

The conditional access policy

Answer 1

Hi, thats not the correct setting if using Conditional Access.

If you want to block using OWA, follow:
https://petri.com/conditional-access-blocks-office-365-downloads

If you want block on mobile devices, look at Cloud App Security:
https://learn.microsoft.com/en-us/cloud-app-security/use-case-proxy-block-session-aad

Answer 2

You need to enable this on the Sharepoint side which will create the Conditional Access policy
https://learn.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices

Answer 3

ok that solved the problem in owa but in device still have the option to download it and in outlook windows too.

Answer 4

@Evangelos Rizos

Try to use “Set-ActiveSyncMailboxPolicy” command to block attachment from downloading:

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 5

Hello and thank you for your answers!!!

I have already done this procedure.

Ok maybe i don't ask the right questions... now I'm confused.
the question is what is the right procedure to block attachments from any device (web, windows app, mobile app ) ?

Thank you again.