Microsoft released new OneDrive admin center and there one option under "Device access" which is set to off by default, but we are not clear whether we can enable it or not.

Control access from apps that don't use modern authentication

Can we enable above feature? will there be nay effect on old devices?


Some third-party apps and versions of Office prior to Office 2013 don't use modern authentication and can't enforce device-based restrictions. This means they allow users to bypass conditional access policies that you configure in Azure.

So if you want to block access from apps that don't use modern authentication then you should set it to on. Else leave it as it as.

Reference - Control access based on network location or app

If you want to enable/disable it, you need Global admin or atleast Onedrive admin permission.

After that, you can go to Onedrive admin center at below url:


Here you can turn the setting on/off as per your policy. After that click on Save and wait for some time for the changes to get propagated.

enter image description here

  • Thanks for the info. I want to know more on this, if this is enabled will it block devices which doesn't use modern authentication. if yes then what kind of devices will effect? Jan 27 '17 at 16:42
  • Check this link - docs.microsoft.com/en-us/azure/active-directory/…. Here, its give you a list of apps which support modern authentication. So any apps which are not listed here will be blocked if this is enabled. Jan 28 '17 at 12:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.