Outlook for iOS and Android allows users to add personal email accounts like Gmail, Yahoo, and iCloud alongside their work or school accounts. This convenience can create a security risk for organizations that require all corporate data to stay within managed devices. When a user adds a personal account, email from that account may sync to the device and potentially expose sensitive company information or bypass data loss prevention policies.
The root cause of this risk is that the Outlook mobile app, by default, does not restrict account types. Microsoft Intune provides a way to enforce a policy that blocks the addition of personal accounts through the Outlook app configuration settings. This article explains how to configure an Intune policy to prevent users from signing in with personal accounts in Outlook for iOS and Android.
You will learn the exact steps to create an App Configuration Policy in Intune, assign it to the correct user groups, and verify that the policy blocks personal account sign-ins. The article also covers common deployment issues and their fixes.