Azure Active Directory条件访问 [英] Azure Active directory conditional Access

问题描述

希望有人可以提供帮助，因为我不确定这是否应该起作用(所有阅读之后).

hoping someone can assist as I am not sure if this is supposed to work or not (after all the reading).

我正在尝试配置有条件的访问策略，以防止有人将iPhone的默认邮件客户端连接到交换活动同步，除非您位于指定的国家/地区.我似乎无法使它正常工作.

I am trying to configure a conditional access policy to prevent someones IPhone's default mail client from connecting to exchange active sync unless you are in a specified country.  I cannot seem to get this to work.

我已经成功配置了条件访问策略，以防止使用Web浏览器进行在线交换，但是我现在想更进一步，并防止iPhone客户端也连接到在线交换.我有 尝试了不同的配置，似乎没有任何效果.任何指导将不胜感激.

I have successfully configured the conditional access policy to prevent access to exchange online using a web browser, but I would now like to take it one step further and prevent the iPhone client from connecting to exchange online as well.  I have tried different configurations nothing seems to work.  Any guidance would be appreciated.

推荐答案

在使用Exchange Active Sync支持现代访问时，对条件访问方案的支持存在某些限制.验证.局限性概述 这里.

There are certain limitations regarding the support for conditional access scenarios while using Exchange Active Sync as it support modern authentication. The limitations are outlined here.

在条件访问策略中，如果选择移动应用程序和桌面客户端作为客户端应用程序，则不支持基于设备的策略.参考: https://docs.microsoft.com/zh-cn/azure/active-directory/active-directory-conditional-access-technical-reference#supported-mobile-applications-and-desktop-clients 可能是这些限制使您无法在iPhone上应用有条件访问策略 客户.

In your conditional access policy if you select Mobile apps and desktop clients as client app, device based policies are not supported. Reference: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-technical-reference#supported-mobile-applications-and-desktop-clients may be these limitations are blocking you from applying a conditional access policy on a iPhone client.

--------------------------------------------------- -------------------------------------------------- ----------------------------------
如果此答案有帮助，请单击"标记为答案"，然后单击投票.要提供有关您的论坛体验的其他反馈，请单击 这里 

-----------------------------------------------------------------------------------------------------------------------------------
If this answer was helpful, click "Mark as Answer" and Up-Vote. To provide additional feedback on your forum experience, click here 

这篇关于Azure Active Directory条件访问的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！