Forum Discussion

MohFarah's avatar
MohFarah
Copper Contributor
Jun 13, 2022

Data Protection policies for web apps

Hi Microsoft Intune Community,   What are the options to set up similar data protection policies for Web versions of the Office apps which you can find in Intune?   Lately i have set up data prot...
Intune
Mobile Application Management (MAM)
Moe_Kinani's avatar
Moe_Kinani
Bronze Contributor
Jun 14, 2022

Hi MohFarah 

 

Oktay Sari has mentioned great solutions for the issue, I would like to mention one more that I like to use for my clients when applying App Protection Policies which is approved Apps. This way, users cannot open the mail using web browser or any other unapproved apps like Mail ‘IOS native’, Gmail etc. 

 

Moe

 

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-policy-approved-app-or-app-protection

MohFarah's avatar
MohFarah
Copper Contributor
Jun 14, 2022

Hi Moe_Kinani 

 

Thank you for your quick reaction. 

 

So the solution you mentioned, is it possible to apply it to private mobile devices (unmanaged)?

 

The client i'm working for has coworkers which use there personally owned mobile devices(sometimes laptops), so you could speak about BYOD. But regarding sensitive information, they would want option like copy/paste etc turnt of on the mobile versions of the Office apps.

  • Moe_Kinani's avatar
    Moe_Kinani
    Bronze Contributor
    Jun 14, 2022

    MohFarah 

     

    Yes, App protection Policies apply on unmanaged devices. You should be able to achieve your goal (restrict copy and paste etc) by using App Protection Policies.

     

    Moe

     

    https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy

     

    https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policies

    • Oktay Sari's avatar
      Oktay Sari
      Iron Contributor
      Jun 14, 2022

      Thx for jumping in Moe_Kinani ‌‌. MohFarah App protection policies will help for sure. 

       

      You mentioned that users sometimes use laptops too. If you want to dive in a little deeper with regards to Windows devices and BYOD. Perhaps Windows Information Protection (https://allthingscloud.blog/windows-information-protection-wip/) can help with data protection on the device itself. I'm not saying WIP is something you should do right away though.. Your best option for BYOD Windows scenario is limited browser access only. If that's not enough, perhaps Windows 365 could do the trick. But sometimes, and in some scenario's WIP can be of added value too. Check out the series of posts I wrote on https://allthingscloud.blog/windows-information-protection-wip/ if you want to learn more.

Resources