Conditional Access Block Download Attachment

Evangelos Rizos 1 Reputation point
2021-03-30T10:19:18.71+00:00

Hello , I trying for a few days to enable correct a Conditional Access Policy that blocks attachments to download.

I managed to block attachment in owa but still have the option to save it to one drive.

Image

In windows i have the option to save it locally or in OneDrive. In mobile app i have the option to save it to device.

82746-outlook-windows.png

The conditional access policy

82772-policy.png

Outlook Management
Outlook Management
Outlook: A family of Microsoft email and calendar products.Management: The act or process of organizing, handling, directing or controlling something.
5,281 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,578 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,669 questions
OneDrive Management
OneDrive Management
OneDrive: A Microsoft file hosting and synchronization service.Management: The act or process of organizing, handling, directing or controlling something.
1,272 questions
0 comments No comments
{count} votes

9 answers

Sort by: Most helpful
  1. Evangelos Rizos 1 Reputation point
    2021-04-01T07:18:32.967+00:00

    Hello in mobile devices and outlook in windows still cannot block attachment only.
    I created an access and session policy just to be sure but with the same results 83450-image-2021-04-01-101744.png83478-cloud-app.png

    0 comments No comments

  2. KyleXu-MSFT 26,271 Reputation points
    2021-04-01T08:38:37.243+00:00

    @Evangelos Rizos

    If so, why not use transport rule to block email which contains attachment directly:
    83614-qa-kyle-16-36-48.png


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  3. Evangelos Rizos 1 Reputation point
    2021-04-01T09:26:30.54+00:00

    Yes but the user hasn't the opportunity to view the attachment. I want the users to preview their files but not download them from anywhere.
    84002-pic.png


  4. Evangelos Rizos 1 Reputation point
    2021-04-06T06:05:45.183+00:00

    Hello I created a ticket in Microsoft. They told me that in outlook windows application cannot be managed via cloud service the only thing it can be done is from registry to block attachments. So for the Outlook mobile does not use ActiveSync anymore and many of the restrictions doesn't work.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.