Hey everyone,
I'm facing a bit of a dilemma with our Conditional Access Policy. Has anyone had a situation where blocking Microsoft Teams Services through this policy accidentally blocks the 'New Outlook' for users? Just to clarify, it seems to work fine with Classic Outlook and Web Outlook, but not with the New Outlook.
Here are some details:
- Affected users have sign-in logs showing 'Microsoft Outlook' as the app.
- The App ID from the sign-in log is 5d661950-3475-41cd-a2c3-d671a3162bc1.
- The sign-in error displayed is 53003.
I'm really trying to find a way to exclude New Outlook from being blocked, but I'm struggling here. Ideally, I'd prefer everyone to just use Classic Outlook, but the higher-ups want to keep New Outlook available. Any suggestions would be greatly appreciated!
1 Answer
Blocking Teams usually raises a lot of questions! I'm curious—what's the goal behind blocking it in the first place? Are you trying to prevent users from accessing Teams during a migration or something? If that’s the case, maybe you could just remove Teams from their Office 365 licenses instead of going through Conditional Access? That might simplify things for New Outlook access.
Yeah, we're actually migrating from an external tenant (@sourcetenant.com) to our own (@targettenant.com). We set up new devices for users and they’re using the target tenant domain temporarily. We want them to focus on the target tenant's teams, not their old source tenant teams, as both are active right now.