
An enrolled and compliant device will give the end-user the normal experience. End-user experienceĪfter the configuration of the Skype for Business Online policy and the compliancy policy is completed, it’s time to look at the end-user experience. When used independently, the targeted devices are evaluated and reported with their compliance status. Note: Compliance policies can be used independently of conditional access.
Skype for business mac block password#
To configure a compliance policy, choose, based on the requirements, during the Create Compliance Policy Wizard the Supported Platforms and choose between the applicable Password, Advanced Password Settings, Encryption, Email Profiles, Windows Device Health Attestation, Jailbreak and Operating System Version Rules. In the Configuration Manager administration console navigate to Assets and Compliance > Overview > Compliance Settings > Compliance Policies and click Create Compliance Policy. To configure a compliance policy, choose, based on the requirements, between the applicable Password, Advanced Password Settings, Encryption, Email Profiles, Windows Device Health Attestation, Jailbreak and Operating System Version settings. In the Microsoft Intune administration console navigate to Policy > Conditional Access > Compliance Policies and click Add…. When no compliance policy is configured and deployed, the device will automatically be considered compliant. Keep in mind is that it’s not required to configure and deploy a compliance policy. After creating the compliance policy, it can be deployed to users like any other policy. The configuration of the compliance policy differs between Microsoft Intune standalone and Microsoft Intune hybrid. This policy defines the rules and settings that a device must comply with in order to be considered compliant by conditional access polices. The next step is the configuration of the compliance policy. To make sure that the Skype for Business Online policy is targeted to specific users, configure an Azure AD security group as a Targeted Group and, when there are users that need to be exempted, make sure to configure an Azure AD security group as an Exempted Group. To enable the Skype for Business Online policy select Enable conditional access policy and select the platforms to apply the conditional access policy to. In the Microsoft Intune administration console navigate to Policy > Conditional Access > Skype for Business Online Policy Microsoft Intune standalone and Microsoft Intune hybrid Keep in mind that after saving the policy, it takes effect immediately Environment The configuration has to be done through the Microsoft Intune administration console. The configuration of the Skype for Business Online policy is the same for Microsoft Intune standalone and Microsoft Intune hybrid. This policy will be be stored and targeted in Azure AD. This policy makes sure that only managed and compliant devices can access Skype for Business Online. Let’s start with the first step, which is the configuration of the Skype for Business Online policy. The first step is to configure the Skype for Business Online policy and the second, and also optional, step is to configure the c ompliance policy. The configuration of conditional access for Skype for Business Online contains two steps.
Skype for business mac block for android#
At this moment conditional access for Skype for Business Online is only supported for Android and iOS devices. The end-user must use an Android or an iOS device.Conditional access will not be applied to end-users who are in a Skype for Business on-premises deployment

/001-how-to-block-someone-on-skype-4173052-c78b6812d6cd44128deac61f4b42c07c.jpg)
Modern authentication must be enabled for Skype for Business Online.

Prerequisitesīefore starting with the configuration steps for conditional access for Skype for Business Online, there are a few technical prerequisites that should be in place, or should be known. The configurations that I’ll provide, are provided for Microsoft Intune standalone and Microsoft Intune hybrid. During this post I’ll go into more detail about the prerequisites, the configuration and the end-users experience. With this post I want to create more awareness for the availability of this feature and I want to show the currently available configuration options. This time about conditional access for Skype for Business Online. This week another post about conditional access.
