Block Access From Unmanaged Devices To SharePoint or Specific Sites

• Get started with the SharePoint Online Management Shell | Microsoft Docs
• Learn about sensitivity labels – Microsoft 365 Compliance | Microsoft Docs
• Control access from unmanaged devices – SharePoint in Microsoft 365 | Microsoft Docs

Block Access From Unmanaged Devices To SharePoint

From SharePoint Admin Center > Polices > Access Control

Click Unmanaged Devices

Note “To use this setting, get a subscription to Enterprise Mobility + Security and assign a license to yourself. ” See Microsoft Endpoint Manager | Microsoft 365 for more information

• Use app-enforced restrictions – SharePoint in Microsoft 365 | Microsoft Docs

Examples block download, save and print on unmanaged devices for a specific SharePoint site (SharePoint, OneDrive)

• Limit access to a single site: Set-SPOSite -Identity https://<SharePoint online URL>/sites/<name of site or OneDrive account> -ConditionalAccessPolicy AllowLimitedAccess
  

   

• Block access to a single site: Set-SPOSite -Identity https://<SharePoint online URL>/sites/<name of site or OneDrive account> -ConditionalAccessPolicy BlockAccess
  

   

• Update multiple sites at once: (Get-SPOSite -IncludePersonalSite
  $true -Limit all -Filter
  “Url -like ‘-my.sharepoint.com/personal/'”) | Set-SPOTenant -ConditionalAccessPolicy AllowLimitedAccess