I need some help with different access controls for unmanaged devices in my company. Users inside the company having limited, web-only access to SPO sites and content, if they are using unmanaged devices. External shared files will be opened on unmanaged devices outside the company. They should be able to print and download the files.

The limitation of web-only access on unmanaged devices is blocking saving/printing of external shared content.

How could I solve this problem?

Thanks for your help, Simon

1 Answer 1


I don’t think that's possible.

The point of access control on unmanaged devices is to remove the ability to download, print, or sync files for security consideration. It is not supported to exclude only external shared contents from the policy. (See the third Note in Section “Limit access” via this document.)

As a workaround, you can adjust limit access settings on site level. For example, use PowerShell to change the value of property LimitedAccessFileType. Or configure exclusion policy for specific users via Azure AD.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.