How to manage Microsoft 365 email using Hexnode?Solved

Yeah. On Windows devices, you can deploy the M365 email setup directly using Hexnode’s Email policy. Once the device receives the policy, the email account just shows up — no server details, no confusion.

You can check the setup guide here: Configuring Email in Windows devices.

Best Regards,
Isabel Lora
Hexnode UEM

We’ve been doing this for a few months now. Biggest win is new hires — they sign in and mail is already there.

Wow! That already sounds like a dream. But can we stop people from copying mail content into personal apps like WhatsApp?

That’s a good question, and it’s important to clarify what can and cannot be controlled on Windows.

Hexnode does not directly block copy-paste of email text between apps at the OS level. However, you can significantly reduce data leakage from corporate email using a combination of controls:

1. Restrict where email attachments can be saved

   You can limit allowed storage locations so attachments cannot be saved to personal folders or external storage.

   Portal navigation: Policies > Windows > Advanced Restrictions > File Explorer Settings > Allowed storage locations

2. Control which apps can access corporate email data

   By blocking the usage of unapproved or unmanaged apps on the device, you ensure that corporate email and attachments are accessed only through approved apps like Outlook.

   Portal navigation: Policies > Windows > App Management > Blocklist / Allowlist

   This helps prevent users from opening or sharing corporate attachments through personal apps.

3. Disable personal cloud sync (if required)

   You can disable OneDrive file sync to prevent corporate files from syncing to personal cloud accounts.

   Portal navigation: Policies > Windows > Restrictions > OneDrive file sync

While these controls don’t stop copy-paste of plain text, they are effective in limiting file-based data movement and app-level access, which is where most leakage occurs.

Best regards,
Isabel Lora
Hexnode UEM

Makes sense.

What if someone leaves the company or loses their phone? We don’t want to wipe their whole device.

Selective wipe can save you, @ace_98 _! We use it all the time — removes only work email and company data, nothing personal.

Nice. One last thing, can we block email on devices that aren’t secure?

Yes, this can be done using Conditional Access. It automatically blocks Microsoft 365 email access on any device that isn’t encrypted or doesn’t meet your security standards, like having a passcode, being rooted/jailbroken, or failing compliance checks.

Best Regards,
Isabel Lora
Hexnode UEM