topic Re: Context-Aware Access for blocking older Operating Systems in Peer-Peer Topics

Context-Aware Access for blocking older Operating Systems

mw_slocoe — Fri, 12 Dec 2025 15:19:19 GMT

I have created a CAA rule for blocking older Windows and MacOS from logging into Google Apps. It is currently in Monitor Mode but it seems to block what I want to allow. Do I have it misconfigured or am I reading the log wrong?

Config....

Log....

Re: Context-Aware Access for blocking older Operating Systems

Scott — Mon, 15 Dec 2025 17:08:17 GMT

We are not using OS rules for CAA so this is just a guess from me, but did you deploy the endpoint verification extension or helper to devices? Also it looks like that rule is going to block mobile and Chromebook access for your accounts...which could be intended, but just in case 😀

Re: Context-Aware Access for blocking older Operating Systems

Kim_Nilsson — Tue, 16 Dec 2025 10:01:37 GMT

Yeah, the Endpoint Verification extension is necessary.

Other than that, the rules look OK, with the caveat that @Scott mentions. 🙂

This is what I have to block old versions of macOS. Sorry about the popor image quality. It wasn't possible to print the entire page to PDF, so I had to take a zoomed out screenshot, and then zoom in again in Paint. 🙂

Oh, I also found this interface, which isn't supposed to be available for Education. I still set them all to Warn. 🙂

https://admin.google.com/ac/context-aware/security-advisor