macOS and Microsoft 365 access.
This notice is specifically for Mac users.
The controls put into place last month for Windows and Linux are going into effect for macOS computers on July 23. On July 11, co-managed computers will have the “Company Portal” installed on them via jamf (aka Self Service) to prepare for this.
After July 23, unofficial apps will stop working. I’ve attached the announcement from BIS which includes a FAQ at the bottom of this announcement.
If you use a non-Argonne Mac, you will only be able to use the Web version of Office tools, including Outlook. Likewise, if you have an Argonne-owned macOS computer, but it is not registered in jamf, the same restrictions apply.
If your computer has the Self Service app on it, and you are able to successfully run it, your computer will be certified Government Furnished Equipment (GFE) and the Microsoft applications will work as expected. You will not be able to use third party applications, as noted above.
If your computer does not have the Self Service app on it, we can help you get that set up. Please follow the instructions here (I recommend “The Easy Way.”)
We cannot register computers not owned by Argonne.
If you do not use a Mac, you have no action. This does not affect mobile phones, iPads or other tablets, Windows computers, or Linux computers as those changes went into place earlier this year.
To All Concerned Personnel:
What are we doing?
We are deploying the Microsoft Company Portal app on managed macOS computers on Thursday July 11th
Why are we doing it?
To comply with data protection policies that will be activated later this month, your macOS device needs to be evaluated for security compliance before data is allowed to be accessed by the Microsoft 365 apps on your computer. The Company Portal app allows compliance data to be passed between your computer and Microsoft to ensure full access to Microsoft 365 data.
What do you need to do?
Once the Company Portal is installed, you will be prompted to sign in using your Argonne credentials. After successful sign-in, your device will be allowed full access to Microsoft 365 via the desktop and web apps.
What is the effect on you?
With the Company Portal and the associated compliance check in place, if your device is marked as compliant, you will continue to be able to access Microsoft 365 data when new data protection policies are activated later this month (July 23rd).
If your computer has an issue with its compliance status or if your computer is not managed, certain functionality will be impacted when the new data protection policies are activated on July 23rd:
- You will be able to access Microsoft 365 apps via a web browser; printing and downloading will be disabled.
- Microsoft 365 desktop apps will no longer be allowed to sign in and access Argonne data.
FOR MORE INFORMATION
- Please see knowledge base article
FAQ: Microsoft 365 Security for Computer Workstations - Please reach out to the Service Desk at Argonne Service Desk at 630-252-9999, option 2, or email [email protected]