Skip to content

Update conditional access policy for device compliance #1813

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Jhope188 wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Update conditional access policy for device compliance #1813

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
6770ab3
Update conditional access policy for device compliance
Jhope188 Nov 5, 2025
0fb29a9
Update docs/identity/conditional-access/policy-all-users-app-enforced…
Jhope188 Nov 6, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions docs/identity/conditional-access/policy-all-users-app-enforced-restrictions.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,9 @@ This policy can help organizations accomplish the following initiatives:
1. Under **Target resources** > **Resources (formerly cloud apps)**, select the following options:
1. Under **Include**, choose **Select resources**.
1. Choose **Office 365**, then select **Select**.

1. Under **Conditions** > **Filter for devices**, select the following options:
1. Under **Exclude filtered devices**, configure the rule with: `device.isCompliant -eq True -and device.trustType -eq "ServerAD"`
1. Under **Access controls** > **Session**, select **Use app enforced restrictions**, then select **Select**.
1. Confirm your settings and set **Enable policy** to **Report-only**.
1. Select **Create** to create to enable your policy.
Expand Down