Blocking desktop devices

Problem

You are trying to use the approve feature with desktop devices to block access to data.

Environment

  • Endpoint management
  • Chrome browser

Solution

This feature only helps to block the Chrome sync on Chrome browser, access to the account is still allowed.
  1. Log in to the Admin console.
  2. Navigate to  Devices > Mobile & endpoints > Settings > Universal Settings.
  3. Click on Security and turn on the "Device approvals" policy.
  4. Go back to the Universal Settings section and click on Data Access and turn on Endpoint verification.
  5. Next you have to force install the Endpoint Verification extension.
If your users have the Endpoint Verification installed on Chrome, the approval will only work with Chrome. Other browsers will not be affected by this.

If you want to control the actual data access, you need to use context aware access only available for Enterprise users and Education Plus users.