You can block the built-in mail apps on iOS/iPadOS and Android when you allow only the Microsoft Outlook app to access Exchange Online. Access policy settings to require simple PIN for access, and block managed apps from running on jailbroken or rooted devices.Īpp-based conditional access and client app management add a security layer by making sure only client apps that support Intune app protection policies can access Exchange online and other Microsoft 365 services.Data relocation policies like Save copies of org data, and Restrict cut, copy, and paste.You can also restrict data movement to other apps that aren't protected by App protection policies. You can use App protection policies to prevent users from saving work files in unprotected locations. In this case, even though your company doesn't manage the device, you still need to make sure that work files and resources are protected. You can also use app protection policies on employee owned devices that are not enrolled for management in Intune. Intune app protection policies help protect your work files on devices that are enrolled into Intune. Dual identity allows the apps to manage work files separately from personal files. Office mobile apps, as well as Microsoft Edge for Mobile, support dual identity. Remove work files if device is offline for 90 days.Block access to work files if the device is offline for 720 minutes.Prevent protected apps from loading work files on jailbroken or rooted devices.Require work files to only be saved to OneDrive or SharePoint.Block work files from being backed up in iTunes, iCloud, or Android backup services.Require the PIN to be reset after five failed attempts.The app protection that you enable will enforce the following actions: By following this guided scenario in the Device Management portal, you can enable basic Intune app protection on iOS/iPadOS and Android devices.

Open office ios app