Forum Discussion
Intune - App protection policy to protect company data
Have a look at this: https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/setup-with-modern-authentication#organization-allowed-accounts-mode
Organization allowed accounts is Microsoft's best practice of performing this
- May I ask you one more thing - with App protection policy, do I understand it properly that it will Enrol mobile phones to intune automatically when a user will trigger the policy? Or the policy will not have any effect on phone enrolment?
I am asking as I have been watching several trainings where it was mentioned that there are 3 ways of onboarding phones - and App protection policy was mentioned as kind of way to enroll phones. However, it has not been explained if it will really enrol phones to Intune or not- You can do a sort of enrollment from the App Protection Policy (APP). This is used for a pure Bring Your Own Device scenario. When the device is owned by the end user and not a Company Owned device. You can login from a Microsoft App and the APP policy is applied to the device without a MDM enrollment. If you like more info about this let me know..
------
Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.
If the post was useful in other ways, please consider giving it Like.and what is that "sort of enrolment" please? This is exactly what I am not sure - will the mobile phone be visible in Intune?
I understand there are two other ways to enrol mobile phone - fully (company) managed and BYD with work profile. And these two are visible in Intune.
Btw, our organization didn't really care much about mobile phones so far... so it is a bit messy... and I am trying to change that. As we have mix of personal phones and company phones, it looks that app protection policy could be a perfect fit to mitigate data leak risk for now.
SebastiaanSmits cool... Thank you. Will test it soon but looks it is what I was looking for.
