Policy Managed apps with OS Sharing are designed to be used for managed/enrolled devices. Let’s take a very good look at this policy. Or should we choose a happy medium? With this option, we are going to make sure MDM-enrolled devices can transfer data to managed apps and protected apps. Maybe changing the setting to all apps but changing it to all apps? Changing it to “All Apps” is not secure at all! So what options do we have, are we going to exempt apps? Supported Microsoft Intune apps | Microsoft Docs 3. As this app doesn’t support the core App Protection Policy settings You probably can guess it, the Rabobank app can’t be targeted. The public app must be targeted with an app protection policy. Please beware (this was my pitfall) that you could still send data to an unmanaged app, but the data will be encrypted and unreadable by the unmanaged app. When you configured this option, you can only transfer data to any other policy-managed app. This is all because you made sure it was not possible to send data to other apps except policy-managed apps. Normally the user could click on “Pay” to open the Rabobank payment app which was already installed on the device.īut now, after the device was enrolled and received the app protection policy, the pay now button was not opening the Rabobank app any longer. He opens the link in Microsoft Edge policy managed app to start making the payment. After a few days, he receives an email to make a simple payment. One of the employees has their IOS mobile device enrolled into Intune and of course, the App protection policies were applied. Here is a very good example of what could happen when you did not lower the bar: Some side notes when using the OS sharing policy.Policy Managed Apps with Open-In/Share filtering.I will divide this blog into multiple parts I updated this whole blog because I noticed some settings were not clear to everyone (even me!) so here we go

You really don’t want well-behaved employees who enrolled their own devices, become angry about the security barriers, and find another way to share the data. In my opinion, you need to make sure you lower the security bar for the Managed/MDM Enrolled devices by changing the App Protection policies. In one of my last blogs, I showed how you can set up multiple App protection profiles to make sure your managed and unmanaged IOS devices could receive the correct app protection policy.

Dropboxx app sidenotes