Forum Discussion
Intune iOS Prevent Screen Capturing in managed or specific apps
Hello,
is it possible to block screeen captures in specific apps on iOS? It would be very useful, especially for the Outlook app. We don't want to block all screenshots on the devices.
Kind regards
- Hi RSParkway,
This one is not possible with IOS, because it needs to be allowed by Apple. Apple does not allow application to control the underlying IOS.
That’s why it’s available on Android but not IOS.
Hope this helps!
Moe
Finally, this option has been arrived. For apps that have updated to v19.7.6 or later for Xcode 15 and v20.2.1 or later for Xcode 16 of the SDK, screen capture block will be applied if you have configured Send Org data to other apps setting to a value other than “All apps”. You can configure app configuration policy setting “com.microsoft.intune.mam.screencapturecontrol = Disabled” if you wish to allow screen capture for your iOS devices.
Read more iOS/iPadOS app protection policy settings - Microsoft Intune | Microsoft LearnHi,
Can someone explain to me how I would check for Xcode versions? Where I would look? It's written as if it's obvious and it may be to developers but I'm just a simple admin :) : "For apps that have updated to v19.7.6 or later for Xcode 15 and v20.2.1 or later for Xcode 16 of the SDK".
I mean, I can see the Outlook version on a mobile device but that obviously isn't relevant. My MAM policies don't show any SDK values and I haven't specified any minimum SDK values for this very reason.Hi all, I just wanted to leave an update.
I reached out to Microsoft to get the straight scoop on what this means to users and Intune Admins and not just app developers... :)
- This is a real thing and it’s already active. It’s specifically for MAM/App Protection Policies [we don't use MDM for our mobile devices so this works for us]. We can block users from taking screenshots with their Apple devices if the app they are trying to screenshot meets the SDK and XCode version requirements in the article.
- It works on devices running iOS 17 and iOS 18 as these have the req’d XCode content.
- It works with [our] existing iOS App Protection Policy as it is currently configured (Send Org Data to Policy Managed Apps). We won’t have to amend the policy unless we want to block it from working.
- It’s current(ish). It appears that the latest Microsoft Outlook, Teams, OneDrive, etc. mobile apps have already been updated, and so far I have verified screenshots are blocked on Outlook, Teams, and OneDrive.
- This is very much dependent on the vendors that support the “Intune-wrapped” apps making sure they have been updated with the appropriate SDK and XCode requirements. Don't make any assumptions about this feature on any app that has been wrapped to comply with the Intune App Protection policies until it's been tested.Thanks!
Derek
Sreejith_rWe're looking to keep Send Org data to to other apps set as Policy managed apps but we don't want screenshots blocked on Outlook,Teams,Edge etc, do you know if this is possible?
You can configure app configuration policy setting “com.microsoft.intune.mam.screencapturecontrol = Disabled” if you wish to allow screen capture for your iOS
Glad to hear this.
Thank for the update Sreejith_ris this new feature Dont we have it before.? Really surprised,
did I miss this when i configure my profile 3 months back.?The screenshot provided is discussing MDM enrolled devices, a feature that has been in place for quite some time. The new feature applies to MAM configured devices that are not enrolled in MDM.
- There has been an update from Intune.
Now you can block iOS Screen Capture.
Device restriction - General - Apply to all enrollment types - Block screenshots and screen recording: Yes prevents screenshots or screen captures on devices. In iOS/iPadOS 9.0 and newer, it also blocks screen recordings.
https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-iosnhtkid
Hi Friend
Do you have step by step on this ??
Intune iOS Prevent Screen Capturing in managed or specific apps- Sorry for the late reply.
Create configuration profile for iOS, use Settings catalog, then search the setting called "Allow Screen Shot".
But this blocks the screen capturing at device level, not app level. User can't screenshot at all on the iPhone.
- This blocks screenshots entirely correct? I would like to see a setting that does that specifically for org data in APP for iOS/iPadOS/Android. I supposed if you you really wanted to get around this you could take a picture from another device but it still would be nice to have the option.
- You are correct.
The iOS setting will block the whole device, which is quite annoying.
It is a setting from the Device restriction profile, not from the MAM setting. Thus it applies to the whole device. You don't really want to do that to your users, it's a bit intrusive.
And like you said, people could just take photos with another device. Applying this setting will not really stop the culprit but punish good users, which are most of your staff.
On the other hand, Android has this setting in MAM policy, which can block screenshot per protected apps.
- This is great, thanks for sharing!
- Hi RSParkway,
This one is not possible with IOS, because it needs to be allowed by Apple. Apple does not allow application to control the underlying IOS.
That’s why it’s available on Android but not IOS.
Hope this helps!
Moe- Hi All,
I would like to revisit the post from 2020 with updated information. Could you please confirm whether the situation remains the same or if there are any changes in the device-level blocking? Additionally, is there an option to block screenshots at the app level on iOS?
Thank you for your assistance.
