Microsoft Previewing macOS Conditional Access Using Azure Active Directory and Intune -- Redmondmag.com

Microsoft Previewing macOS Conditional Access Using Azure Active Directory and Intune

By Kurt Mackie
08/23/2017

Microsoft is previewing the ability to impose "conditional access" restrictions on devices running the Apple macOS operating system.

Update 8/25: The preview has a known issue where password compliance policies aren't getting enforced. A Microsoft blog post suggested it's an issue that Apple is currently addressing, with no estimated fix date.

The preview was recently added to Azure Active Directory and the Microsoft Intune mobile management service, explained Alex Simons, director of program management for the Microsoft Identity Division, in a Wednesday announcement.

Conditional access restrictions are imposed through policy settings. For instance, network access by a device might get blocked if it lacks the latest software patches. IT pros can set up such policies using the Intune blade of the Microsoft Azure management portal. They can then specify the specific requirements for devices to meet to ensure compliance.

The preview will only work if "the Intune Company Portal app" is installed, Microsoft's announcement clarified. Devices need to be running macOS 10.11 or greater to use the feature. The conditional access policies will work with Office 2016 for macOS applications (namely, Excel, OneNote, Outlook, PowerPoint and Word) that are at version 15.34 or greater. The policies are only supported with the Apple Safari browser.

Microsoft has had its conditional access scheme in place for Intune and Azure AD for various operating system platforms for a while. However, for some reason, macOS support had lagged. It was "one of the most frequently requested" items mentioned by customers, Simons indicated.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

What's Inside Microsoft 365's Security Toolbox?

Microsoft provides plenty of native tools to secure Microsoft 365. IT pros just have to know where to look.
Microsoft Kills 30-Day Data Retention Policy for Copilot in Fabric

Microsoft this week announced several usability improvements coming to Copilot in Fabric in preparation of its general availability release later this year.
Using Microsoft Office to Build a Network Diagram 2

Now that we've set up our process, let's dig in with the actual execution.
Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.
Fallout from Microsoft's 'Midnight Blizzard' Saga Hits Feds

When the Russian attack group Midnight Blizzard successfully breached Microsoft corporate e-mail accounts late last year, it apparently managed to steal U.S. government agency e-mails, too.