Thanks for the suggestion.
We are currently working with a new feature and partnership functionality with JAMF. JAMF and Intune integrate to help identify "allowed MAC's" of which you can apply conditional access policies to MAC's.
OneDrive for Business users are now able to share a link to Office documents that blocks recipients from downloading copies but still allows them to view the document in Office Online.
Users can create links that block download by using the common Sharing experience that exists across Office 365. By going into Link Settings they’ll be able to toggle the “block download” option for view-only links.
We’ve completed rollout for “anyone” and “people in my organization” links, and are working on enabling it for the remaining link types. “Specific people” links are enabled on web endpoints and we’re working on native clients.
We are working on bringing this same capability to other file types.
So correct me if I am wrong, but there are options within Azure Active Directory to add information protection options with labeling?
Rob - Old Post but this setting is to control syncing with the Client - https://technet.microsoft.com/en-us/library/dn917455.aspx