{"id":32088,"date":"2022-07-06T16:04:42","date_gmt":"2022-07-06T10:34:42","guid":{"rendered":"https:\/\/www.inogic.com\/blog\/?p=32088"},"modified":"2022-07-06T16:08:49","modified_gmt":"2022-07-06T10:38:49","slug":"use-of-conditional-access-to-restrict-access-to-dynamics-365-crm-by-operating-system","status":"publish","type":"post","link":"https:\/\/www.inogic.com\/blog\/2022\/07\/use-of-conditional-access-to-restrict-access-to-dynamics-365-crm-by-operating-system\/","title":{"rendered":"Use of conditional access to restrict access to Dynamics 365 CRM by Operating System"},"content":{"rendered":"<p>In our previous <a href=\"https:\/\/www.inogic.com\/blog\/2022\/06\/use-of-conditional-access-to-reduce-unauthorized-access-to-dynamics-365-crm-by-location-or-ip\/\" target=\"_blank\" rel=\"noopener\">blog<\/a>, we saw how to restrict CRM access by Country or by IP Address. But at times there can arise a situation where the company doesn\u2019t use any operating system other than Windows and wants to block access of CRM for all other operating systems apart from Windows. This can be done using conditional access in Azure Portal. Below are the <a href=\"https:\/\/azure.microsoft.com\/en-us\/free\/\" target=\"_blank\" rel=\"noopener\">pre-requisites<\/a> for the same<\/p>\n<ul>\n<li>A subscription to Azure Active Directory Premium.<\/li>\n<li>A federated Azure Active Directory tenant.<\/li>\n<\/ul>\n<p>Once you make sure you complete the above requirements, follow the below steps to achieve conditional access based on the operating system.<\/p>\n<p>1. Log In to the <a href=\"https:\/\/portal.azure.com\/#home\" target=\"_blank\" rel=\"noopener\">Azure Portal<\/a>.<\/p>\n<p>2. In Services, search for Azure AD Conditional Access.<\/p>\n<p>3. After creating a new location, click on Policies -&gt; New Policy -&gt; Create New Policy.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-32087\" style=\"border: 1px solid #0a0a0a; padding: 1px; margin: 1px;\" src=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1Dynamics-365-CRM-by-Operating-System.jpeg\" alt=\"Dynamics 365 CRM by Operating System\" width=\"1920\" height=\"962\" srcset=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1Dynamics-365-CRM-by-Operating-System.jpeg 1920w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1Dynamics-365-CRM-by-Operating-System-300x150.jpeg 300w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1Dynamics-365-CRM-by-Operating-System-1024x513.jpeg 1024w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1Dynamics-365-CRM-by-Operating-System-768x385.jpeg 768w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1Dynamics-365-CRM-by-Operating-System-1536x770.jpeg 1536w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1Dynamics-365-CRM-by-Operating-System-660x331.jpeg 660w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<p>4. While creating a new policy, you can select to block either All Users or any number of particular users or Azure group.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-32086\" style=\"border: 1px solid #0a0a0a; padding: 1px; margin: 1px;\" src=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/2Dynamics-365-CRM-by-Operating-System.jpeg\" alt=\"Dynamics 365 CRM by Operating System\" width=\"940\" height=\"965\" srcset=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/2Dynamics-365-CRM-by-Operating-System.jpeg 940w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/2Dynamics-365-CRM-by-Operating-System-292x300.jpeg 292w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/2Dynamics-365-CRM-by-Operating-System-768x788.jpeg 768w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/2Dynamics-365-CRM-by-Operating-System-660x678.jpeg 660w\" sizes=\"(max-width: 940px) 100vw, 940px\" \/><\/p>\n<p>5. In the next step, choose which cloud apps should be blocked. Here, you can select either all cloud apps or any number of specific cloud apps. In this case, I\u2019m selecting Common Data Service (which will block out CRM access).<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-32085\" style=\"border: 1px solid #0a0a0a; padding: 1px; margin: 1px;\" src=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/3Dynamics-365-CRM-by-Operating-System.jpeg\" alt=\"Dynamics 365 CRM by Operating System\" width=\"1920\" height=\"960\" srcset=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/3Dynamics-365-CRM-by-Operating-System.jpeg 1920w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/3Dynamics-365-CRM-by-Operating-System-300x150.jpeg 300w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/3Dynamics-365-CRM-by-Operating-System-1024x512.jpeg 1024w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/3Dynamics-365-CRM-by-Operating-System-768x384.jpeg 768w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/3Dynamics-365-CRM-by-Operating-System-1536x768.jpeg 1536w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/3Dynamics-365-CRM-by-Operating-System-660x330.jpeg 660w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<p>6. In the conditions, select the operating systems that you need to restrict access to. Since we are only allowing access to windows-based machines, we will select all other platforms except Windows and Windows Phone. Select <strong>On<\/strong> in Enable Policy and click on create.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-32084\" style=\"border: 1px solid #0a0a0a; padding: 1px; margin: 1px;\" src=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/4Dynamics-365-CRM-by-Operating-System.jpeg\" alt=\"Dynamics 365 CRM by Operating System\" width=\"1920\" height=\"960\" srcset=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/4Dynamics-365-CRM-by-Operating-System.jpeg 1920w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/4Dynamics-365-CRM-by-Operating-System-300x150.jpeg 300w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/4Dynamics-365-CRM-by-Operating-System-1024x512.jpeg 1024w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/4Dynamics-365-CRM-by-Operating-System-768x384.jpeg 768w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/4Dynamics-365-CRM-by-Operating-System-1536x768.jpeg 1536w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/4Dynamics-365-CRM-by-Operating-System-660x330.jpeg 660w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<p>7. Under Access control -&gt; grant select Block access and click on create.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-32083\" style=\"border: 1px solid #0a0a0a; padding: 1px; margin: 1px;\" src=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/5Dynamics-365-CRM-by-Operating-System.jpeg\" alt=\"Dynamics 365 CRM by Operating System\" width=\"1920\" height=\"959\" srcset=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/5Dynamics-365-CRM-by-Operating-System.jpeg 1920w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/5Dynamics-365-CRM-by-Operating-System-300x150.jpeg 300w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/5Dynamics-365-CRM-by-Operating-System-1024x511.jpeg 1024w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/5Dynamics-365-CRM-by-Operating-System-768x384.jpeg 768w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/5Dynamics-365-CRM-by-Operating-System-1536x767.jpeg 1536w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/5Dynamics-365-CRM-by-Operating-System-660x330.jpeg 660w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><\/p>\n<p>8. After successful creation, a notification will be shown as follows \u2013<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-32082\" style=\"border: 1px solid #0a0a0a; padding: 1px; margin: 1px;\" src=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/6Dynamics-365-CRM-by-Operating-System.jpeg\" alt=\"Dynamics 365 CRM by Operating System\" width=\"439\" height=\"163\" srcset=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/6Dynamics-365-CRM-by-Operating-System.jpeg 439w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/6Dynamics-365-CRM-by-Operating-System-300x111.jpeg 300w\" sizes=\"(max-width: 439px) 100vw, 439px\" \/><\/p>\n<p>9. Now, if a user tries to access our CRM from a macOS-based machine, an error message will be shown as below \u2013<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-32081\" style=\"border: 1px solid #0a0a0a; padding: 1px; margin: 1px;\" src=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/7Dynamics-365-CRM-by-Operating-System.jpeg\" alt=\"Dynamics 365 CRM by Operating System\" width=\"2034\" height=\"1444\" srcset=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/7Dynamics-365-CRM-by-Operating-System.jpeg 2034w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/7Dynamics-365-CRM-by-Operating-System-300x213.jpeg 300w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/7Dynamics-365-CRM-by-Operating-System-1024x727.jpeg 1024w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/7Dynamics-365-CRM-by-Operating-System-768x545.jpeg 768w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/7Dynamics-365-CRM-by-Operating-System-1536x1090.jpeg 1536w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/7Dynamics-365-CRM-by-Operating-System-660x469.jpeg 660w\" sizes=\"(max-width: 2034px) 100vw, 2034px\" \/><\/p>\n<h2>Conclusion<\/h2>\n<p>This is how we can restrict access based on the operating system from accessing any or all of our global apps.<\/p>\n<p><a href=\"https:\/\/www.inogic.com\/product\/productivity-apps\/dynamics-365-crm-sharepoint-security-metadata-sync\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" class=\"alignnone wp-image-32089\" src=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1.jpg\" alt=\"\" width=\"844\" height=\"211\" srcset=\"https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1.jpg 800w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1-300x75.jpg 300w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1-768x192.jpg 768w, https:\/\/www.inogic.com\/blog\/wp-content\/uploads\/2022\/07\/1-660x165.jpg 660w\" sizes=\"(max-width: 844px) 100vw, 844px\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In our previous blog, we saw how to restrict CRM access by Country or by IP Address. But at times there can arise a situation where the company doesn\u2019t use any operating system other than Windows and wants to block access of CRM for all other operating systems apart from Windows. This can be done\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.inogic.com\/blog\/2022\/07\/use-of-conditional-access-to-restrict-access-to-dynamics-365-crm-by-operating-system\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[2361],"tags":[2614],"class_list":["post-32088","post","type-post","status-publish","format-standard","hentry","category-technical","tag-dynamics-365-crm-by-operating-system"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/posts\/32088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/comments?post=32088"}],"version-history":[{"count":0,"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/posts\/32088\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/media?parent=32088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/categories?post=32088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inogic.com\/blog\/wp-json\/wp\/v2\/tags?post=32088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}