outlook error code 53003 when opening attached file

Question

We had a worker this morning receive an email that had an excel file attached and the file was attached to the senders one drive. When our worker tried to open the file they had to sign in with there email and once they signed in they were greeted with "You cannot access this right now" and then under more details it gave the error code of "53003". looking more into this error code it has something to do with compliance policy. I went into our 365 admin center (we have Microsoft 365 E3‎ just for reference) to try and find conditional access policy options but I had issues finding conditional access policy options. looking it up more it seems like people use azure to update conditional access policy. But with our Microsoft 365 E3 we don't have azure and there is no option in the admin center for azure. There is an option under Admin centers that has a compliance option. But when i click that it takes me to Microsoft Purview and when I click through some of those option everything seems to be behind a different plan and essentially wants me to upgrade.

Now the worker just asked for the file to not be sent with it attached to onedrive and that solved that. But for the future if/when this happens again where can I go to change the compliance so that workers can open files that are sent through onedrive?

Answer 1

@Bradley, Thanks for posting in Q&A. For conditional access policy, it is a feature in Microsoft Entra ID which is used to control app access with cloud resource.

https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-policies

From your description, it seems the sign in is blocked by conditional access policy and seems with compliance policy. Based as I know, there's a setting "Require device to be marked as compliant (Intune)" which is related with compliance. Please go to Microsoft Entra ID to see if we have set such policy. For this setting, the device you use to login needs to be enrolled into Intune and its compliance status in Intune needs to be compliant.

https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-grant#require-device-to-be-marked-as-compliant

For detailed information, you can look into sign in log

https://learn.microsoft.com/en-us/entra/identity/conditional-access/troubleshoot-conditional-access

As a workaround, your method is OK. You can send the attachment without needing any login to make it read.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.