This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 24%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Our company wants users to access Outlook and/or Teams on their personal devices, but without full MDM control over their personal devices. How can we ensure that the personal device has the latest iOS before accessing company data on their phones? We are trying to avoid users with compromised devices from accessing valuable company data. Are there any policies that we can enforce to ensure that devices must be updated to access company data while still leaving device control to the user?
I have explored MAM and MAM-WE, but these approaches only allow for settings for the app to be met, rather than requiring the device itself to be up to date. Any help is appreciated.
You can use device condition minimum OS in APP and set it to latest OS build version.
Thank you all for the help! One last question - what about restricting rooted devices from accessing teams and outlook? Is there a setting within the app that would work for that? Edit: Never mind, I found the answer within the link below. Thank you all again.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 35%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZM%3C/text%3E%3C/svg%3E)
@Madison544, Thanks for posting in Q&A.
From your description, I know you want to create a policy to enforce lasted iOS on personal devices for company data access without full MDM control.
Based on my research, we can create an app protection policy for both Outlook and Teams, and in the configuration of Condition launch session, we can configure the Max OS version or Min OS version to restrict the required OS version access the apps.
Hope it will help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.