Blocking users from outside office

Question

For starters this is a standard Office 365 Exchange online  E1 account, so I dont have lots of features.  I need to block standard Office 365 users from accessing outlook mail on web and know how to do that, but what about if they have it on their personal laptop at home, how can I stop those items form using the exchange online mail service or other online services , I just want them to have access with their desktops inside the office to all features of office 365 not not outside ?? Can this be done with a E1 account somehow?

Answer 1

Hello Johnny,

As per my knowledge, for only having the Office 365 E1 Subscription in your organization, it is not feasible to achieve your requirement as that subscription doesn't contain a component to support this kind feature.

However, you can try the Conditional Access policy in Azure Active Directory (AAD). For detailed information about the Conditional Access, please see here. Noted: In this way, you need to pay for the Azure Active Directory Plan 1 or Plan 2 license. For detailed information, please search Azure Active Directory services in this article.

Or it may be better to update your Office 365 Subscription to a premium one, like E3 or E5. Of course, you also can try the third party's proxy way if needed to achieve your requirement.

Hope the above information helpful.

Regards,

Rudy

Answer 2

Hello Johnny,

Sorry for the late reply as I'm OOF. And I think the answer is yes, the Azure AD Conditional Access should be the easiest and lowest cost way to achieve it in your scenario. And if you want to double confirm the detailed information of the Azure related, you can feel free to ask a question here to get the dedicated support.

Feel free to let us know if you need further help.

@VincentChoy, you are right. And Thanks for your help here.

Regards,

Rudy

Answer 3

You can block these via IP range restriction.

Unfortunately, its app dependent. 

For example, Yammer has the setting in Security Section.

Although I have not tried it, based on Microsoft documentation, it appears there are settings in Exchange Online Client Access Rules as well

https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/client-access-rules/client-access-rules/?WT.mc_id=M365-MVP-5000801

SharePoint and OneDrive apparently you can also set location based policies via SharePoint admin center although I have not tried it myself.

https://docs.microsoft.com/en-us/sharepoint/control-access-based-on-network-location/?WT.mc_id=M365-MVP-5000801

I suppose some of the other apps you may have to do your own research, or have to upgrade your license to one that allows you conditional access, which is Azure AD Premium of Microsoft 365.

Hope this helps

Answer 4

There must be a way????????

Answer 5

So either way I have to bump up a licence ? there is no way to do it by itself?