windows 10 remove office office 365 token

Removing the Conditional Access policy consists of two steps: NOTE: For the Office 365 Conditional Access Policy to function in a streamlined and efficient manner, it is recommended to enroll Windows 10 devices using Windows Azure Autopilot enrollment. Unenrolled devices will be marked Non-compliant and users cannot log in to Azure using such devices. In the Device Details view, all enrolled Windows 10 devices will be marked compliant and users can login to their Azure accounts and access Office 365 (and/or other apps included while creating the policy), using these devices. Now, click on Apply Policy option present in the Access Policy view.

If you haven't already integrated your Azure Active Directory, click on Integrate.

On the console, navigate to Device Mgmt -> Office 365 (under Conditional Access).

Right after enabling the Conditional Access policy on Azure, the selected users and groups cannot access Office 365 and other app(s) selected in the policy.

Under Enable policy, select On and click on Create.

Select Grant access and ensure Require device to be marked as compliant is checked.

Configure the action to be taken based on the conditions you have set.

NOTE: Microsoft Azure permits third-party MDM solutions to grant access only to enrolled Windows 10 devices, while blocking all other device platforms.

Click on Device Platforms and identify the platforms you want this Conditional Access policy to apply to.Here, select Office 365 (includes these apps), and/or identify other apps or services you want to protect using this Conditional Access policy.

Under Assignments, select Cloud apps or actions.Test the policy against a smaller group of users to make sure it works as expected. Here, identify and choose the users and/or groups that this Conditional Access policy applies to.Having provided a policy name, select Users and Groups present under Assignments.Click on +New Policy to create the Conditional Access policy.Login to Azure Portal with your account credentials and navigate to Azure Active Directory -> Security -> Conditional Access.Creating the policy on the Azure PortalĬreating the Conditional Access policy on the Azure Portal.Requires Azure Active Directory Premium P1 license.Ĭonfiguring the Conditional Access policy consists of two steps:.Azure Active Directory must be integrated with MDM.Granting access is restricted to Windows 10 devices, whereas all other device types can be blocked if required. Office 365 Conditional Access Policy lets you ensure only Windows 10 devices enrolled with MDM can access Office 365 (and/or other apps that require Microsoft Azure sign in), while restricting access to unenrolled devices. You can do this by creating a device-based Conditional Access policy on the Azure portal.

Windows 10 remove office office 365 token