Home
%3CLINGO-SUB%20id%3D%22lingo-sub-355368%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355368%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F70852%22%20target%3D%22_blank%22%3E%40Ross%20Smith%20IV%3C%2FA%3E%20.%20We%20were%20finally%20able%20to%20allow%20the%20contact%20export%20to%20iOS%20and%20keep%20corporate%20data%20protected.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-353182%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-353182%22%20slang%3D%22en-US%22%3E%40Charlies_Silva%20-%20No%2C%20this%20does%20not%20require%20supervised%20devices%20(that's%20a%20bug%20in%20the%20Intune%20UI%20that%20will%20removed%20later%20this%20month).%20If%20you%20are%20using%20the%20same%20account%20on%20both%20devices%2C%20Outlook%20recognizes%20that%20you%20have%20contact%20sync%20enabled%20on%20one%20iOS%20device%20and%20prevents%20you%20from%20enabling%20it%20on%20a%20second%20iOS%20device.%20If%20you%20have%20contacts%20enabled%20in%20iCloud%2C%20then%20your%20exported%20contacts%20will%20be%20available%20on%20all%20of%20your%20iOS%20devices.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-352580%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-352580%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F70852%22%20target%3D%22_blank%22%3E%40Ross%20Smith%20IV%3C%2FA%3E%26nbsp%3B%20Is%20this%20available%20only%20for%20supervised%20devices%3F%20We're%20implementing%20Outlook%20with%20Intune%20MDM%20but%20the%20contacts%20are%20not%20syncing%20with%20local%20Contacts%20on%20iOS.%20The%20weird%26nbsp%3B%20part%20is%20that%20on%20my%20iPhone%20it%20did%20not%20sync%20but%26nbsp%3B%20on%20my%20iPad%20it%20did.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-319367%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-319367%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F266728%22%20target%3D%22_blank%22%3E%40JoeriJ%3C%2FA%3E%20-%20Soon!%20%3A)%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-319347%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-319347%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F226779%22%20target%3D%22_blank%22%3E%40Intune%20Support%20Team%3C%2FA%3Ethanks%20for%20the%20clarification%2C%20all%20to%20familiar%20with%20the%20upcoming%20support%20change%20regarding%20hybrid%20deployments%2C%20slowly%20but%20surely%20we're%20migrating%20over.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-319341%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-319341%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%20also%20possible%20to%20configure%20the%20button%20%22save%20contacts%22%3F%20I%20want%20to%20auto%20enable%20it%20for%20all%20users%20and%20this%20configuration%20is%20only%20for%20setting%20up%20restrictions.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-315877%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-315877%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F170849%22%20target%3D%22_blank%22%3E%40Myles%20Taylor%3C%2FA%3E%20just%20checked%20with%20our%20hybrid%20lead.%20These%20settings%20are%20not%20in%20hybrid.%20Per%20the%20announcement%20here%26nbsp%3B%20-%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FMove-from-Hybrid-Mobile-Device-Management-to-Intune-on-Azure%2Fba-p%2F280150%22%20target%3D%22_self%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FMove-from-Hybrid-Mobile-Device-Management-to-Intune-on-Azure%2Fba-p%2F280150%3C%2FA%3E%20-%20do%20be%20aware%20that%20hybrid%20MDM%20is%20nearing%20end%20of%20support.%20FastTrack%20is%20resource%20that%20may%20be%20available%20to%20you%20to%20help%20move%20from%20hybrid%20to%20stand%20alone.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-314474%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-314474%22%20slang%3D%22en-US%22%3E%3CP%3Ehow%20does%20one%20in%20a%20hybrid%20Intune%20deployment%20go%20about%20deploying%20this%20new%20configuration%20setting%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-304156%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-304156%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F19581%22%20target%3D%22_blank%22%3E%40John%3C%2FA%3E%20-%20If%20you%20aren't%20using%20device%20configuration%20policies%20to%20control%20device%20and%20app%20behavior%2C%20this%20won't%20affect%20your%20deployment.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-304111%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-304111%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20as%20a%20sanity%20check...%3C%2FP%3E%3CP%3EWe%20don't%20currently%20use%20device%20restrictions%20(as%20we%20have%20a%20mix%20of%20enrolled%20and%20MAMWE)%2C%20so%20we%20use%20App%20Protection%20Policies%20to%26nbsp%3B%3CSPAN%3Erestrict%20data%20transfer%20to%20%22policy%20managed%20apps%22%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Ebut%20have%20not%20disabled%20Contact%20Sync%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWould%20we%20need%20to%20apply%20any%20of%20these%20changes%2C%20or%20are%20they%20only%20applying%20to%20those%20restricting%20via%20the%20device%20configurations%20rather%20than%20app%20protection%20policies%3F%3C%2FP%3E%3CP%3Ethanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-298846%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-298846%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F242047%22%20target%3D%22_blank%22%3E%40Simon%20-%3C%2FA%3E%20We%20have%20no%20way%20to%20create%20%22managed%20contacts%22%20within%20the%20iOS%20Contacts%20app.%20If%20you%20want%20to%20minimize%20data%20leakage%2C%20we%20recommend%20using%20our%20Contact%20Field%20Sync%20controls%20(%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Fomappconfig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Faka.ms%2Fomappconfig%3C%2FA%3E)%20that%20are%20available%20with%20our%20App%20Protection%20Policies%20and%20limit%20what%20data%20is%20exported%20to%20the%20native%20contacts%20app.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-298636%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-298636%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3Ethanks%20for%20sharing%20these%20new%20capabilities%20with%20iOS%2012.%3C%2FP%3E%3CP%3EIs%20there%20any%20chance%20to%20sync%20contacts%20from%20Outlook%20to%20the%20native%20App%20%3CU%3EAND%3C%2FU%3E%20protected%20them%20from%20been%20accessed%26nbsp%3Bby%20third-party%20apps%3F%20or%20did%20I%20miss%20anything%3F%3C%2FP%3E%3CP%3EBR%3C%2FP%3E%3CP%3ESimon%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482339%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482339%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%20am%20testing%20the%20%22Retire%20device%22%20function%20in%20Intune.%26nbsp%3B%20The%20behavior%20is%20not%20as%20expected.%26nbsp%3B%20The%20managed%20apps%20are%20deleted%20from%20the%20device%20after%20synching%2C%20but%20company%20contacts%20on%20the%20device%20are%20still%20present.%26nbsp%3B%20Is%20there%20a%20setting%20that%20needs%20to%20be%20activated%20to%20also%20remove%20company%20contacts%20that%20were%20synched%20with%20Outlook%3F%26nbsp%3B%20I%20would%20have%20thought%20this%20would%20be%20done%20by%20default.%26nbsp%3B%20iOs%20version%2012.2%20with%20contacts%20toggle%20set%20to%20enable%20in%20the%20Outlook%20app%20before%20wipe.%26nbsp%3B%20Thank%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482589%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482589%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F326706%22%20target%3D%22_blank%22%3E%40skoropi%3C%2FA%3E%20-%20That%20is%20currently%20by%20design.%20When%20you%20issue%20a%20retire%20command%2C%20that%20instructs%20the%20OS%20to%20uninstall%20any%20pinned%20apps%20to%20the%20management%20profile.%20An%20OS%20uninstall%20does%20not%20trigger%20any%20function%20within%20the%20app%20to%20do%20cleanup%20(does%20not%20trigger%20profile%20removal)%2C%20and%20that%20results%20in%20the%20exported%20contacts%20being%20orphaned.%20This%20is%20standard%20OS%20behavior%20(same%20as%20user%20intentionally%20uninstalling%20an%20app).%20The%20only%20way%20the%20exported%20contacts%20can%20be%20removed%20is%20through%20a%20profile%20removal%20within%20Outlook.%20Our%20recommendation%20is%20to%20issue%20an%20App%20Protection%20Policy%20selective%20wipe%20prior%20to%20issuing%20a%20device%20retire.%20Selective%20Wipe%20triggers%20Outlook's%20profile%20removal%20process.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-486985%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-486985%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F286177%22%20target%3D%22_blank%22%3E%40Charles_Silva%3C%2FA%3E%3A%20how%20did%20you%20accomplish%20this%3F%20I%20want%20to%20allow%20Outlook%20to%20Save%20Contacts%2C%20but%20block%20any%20other%20app%20from%20reading%20them.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-487451%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-487451%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1081%22%20target%3D%22_blank%22%3E%40Ivan%20Unger%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20allowed%20Outlook%20app%20contacts%20to%20be%20synced%20with%20the%20local%20Contacts%20app.%20From%20there%20I%20don't%20have%20management%20on%20the%20contact%20data%20that%20had%20been%20exported%20(other%20apps%20have%20access%20to%20contact%20information%20as%20it%20normally%20would).%20I%20don't%20know%20if%20you%20can%20allow%20the%20export%20and%20then%20limit%20which%20apps%20can%20have%20access%20to%20exported%20data.%3C%2FP%3E%3CP%3EIn%20the%20previous%20comment%20Ross%20explained%20how%20you%20can%20force%20remove%20the%20data%20if%20you%20want%20to%20retire%20de%20device%20but%20if%20I%20understood%20correctly%2C%20that's%20not%20what%20you're%20trying%20to%20acomplish.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-498001%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-498001%22%20slang%3D%22en-US%22%3E%3CP%3EOkay%2C%20I've%26nbsp%3B%20misunderstood%20your%20comment%20then.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-499825%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-499825%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F70852%22%20target%3D%22_blank%22%3E%40Ross%20Smith%20IV%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20having%20trouble%20understanding%20something%20here%3A%20When%20utilizing%20the%20Outlook%20MAM%20Policy%20to%20force-write%20contacts%20to%20the%20local%20iOS%20Contacts%20app%2C%20are%20the%20contacts%20considered%20managed%20or%20unmanaged%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20they%20are%20managed%2C%20how%20do%20I%20use%20this%20setting%20to%20block%203rd%20party%20from%20accessing%20these%20contacts%3F%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20see%20this%20setting%20here%20in%20your%20post%20allowUnmanagedToReadManagedContacts%26nbsp%3B%20but%20I%20don't%20know%20which%20Intune%20UI%20control%20this%20is%2C%20since%20the%20wording%20is%20different.%20Could%20you%20possibly%20update%20your%20wording%20in%20this%20blog%20post%20to%20reflect%20the%20current%20Intune%20implementation.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-499950%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-499950%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1081%22%20target%3D%22_blank%22%3E%40Ivan%20Unger%3C%2FA%3E%20-%20The%20contacts%20are%20considered%20unmanaged.%20Only%20managed%20EAS%20MDM%20profiles%20are%20able%20to%20create%20%22managed%20contacts%22.%20The%20setting%20%22allowUnmanagedToReadManagedContacts%22%20-%20is%20the%20device%20restrictions%20-%20app%20store%2C%20doc%20viewing%2C%20gaming%20%22Allow%20unmanaged%20apps%20to%20read%20from%20managed%20contacts%20accounts%22.%20This%20is%20documented%20at%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fdevice-restrictions-ios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fdevice-restrictions-ios%3C%2FA%3E.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-574797%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-574797%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eis%20it%20possible%20to%20somehow%20differentiate%20between%20company%20account%20and%20personal%20(hotmail)%20account%3F%20I%20would%20like%20to%20disable%20the%20%3CSTRONG%3ESave%20Contacts%3C%2FSTRONG%3E%20option%20in%20the%20Outlook%20Settings%20for%20company%20accounts%20only%20but%20I%20want%20to%20give%20users%20the%20option%20to%20save%20their%20personal%20contacts%20from%20their%20private%20hotmail%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20regards%2C%3C%2FP%3E%3CP%3ELabinot%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-574810%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-574810%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F146090%22%20target%3D%22_blank%22%3E%40Labinot%20Jashanica%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eyou%20can%20use%20MAM%20Policies%20to%20block%20contact%20sync%20for%20your%20business%20Profile.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapp-protection-policy-settings-ios%23functionality%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapp-protection-policy-settings-ios%23functionality%3C%2FA%3E%3C%2FP%3E%3CP%3EBR%3C%2FP%3E%3CP%3ESimon%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-574915%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-574915%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F126565%22%20target%3D%22_blank%22%3E%40Simon%20Scharschinger%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethank%20you%20for%20your%20reply.%20Could%20you%20further%20elaborate%20on%20the%20MAM%20policies%3F%20I%20looked%20into%20the%20articel%20you%20provided.%20However%2C%20I%20was%20not%20able%20to%20find%20the%20needed%20options%20and%20settings%20which%20would%20fit%20my%20requirements.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20regards%2C%3C%2FP%3E%3CP%3ELabinot%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-575591%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-575591%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F146090%22%20target%3D%22_blank%22%3E%40Labinot%20Jashanica%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3Ein%20the%20documentation%2C%20you'll%20find%20a%20setting%20'Sync%20app%20with%20native%20contacts%20app'.%20This%20is%20the%20setting%20you%20want%20to%20configure.%3CBR%20%2F%3E%3CBR%20%2F%3EBR%3C%2FP%3E%3CP%3ESimon%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-581283%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-581283%22%20slang%3D%22en-US%22%3E%3CP%3Ehi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F126565%22%20target%3D%22_blank%22%3E%40Simon%20Scharschinger%3C%2FA%3E%2C%3C%2FP%3E%3CP%3Esadly%20this%20is%20not%20a%20feasible%20solution%20because%20of%20the%20following%20reasons%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFirst%20of%20all%2C%20when%20the%20option%20to%20save%20contacts%20in%20Outlook%20is%20enabled%20the%20company%20contacts%20are%20not%20saved%20to%20the%20native%20contact%20app%20as%20a%20type%20of%20%22company%20document%22%20but%20is%20instead%20synced%20into%20the%20contact%20app%20as%20a%20normal%20contact%20which%20allows%20non-managed%20apps%20(such%20as%20WhatsApp)%20to%20sync%20these%20company%20contacts.%20I%20haven't%20found%20a%20solution%20yet%20that%20allows%20me%20to%20sync%20company%20contacts%20from%20the%20Outlook%20app%20settings%20into%20the%20native%20contact%20app%20without%20non-managed%20apps%20being%20able%20to%20access%20and%20sync%20them.%20In%20my%20device%20configuration%20profile%20I%20blocked%20that%20unmanaged%20apps%20can%20view%20corporate%20documents%20already.%20Additionally%20I%20set%20the%20setting%20%22Send%20Org%20data%20to%20other%20apps%22%20in%20my%20app%20protection%20policy%20to%20%22Policy%20managed%20apps%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20only%20way%20for%20me%20to%20prevent%20this%20from%20happening%20was%20as%20follows%3A%3C%2FP%3E%3CP%3EDisable%20the%20option%20to%20sync%20contacts%20in%20the%20Outlook%20app%20and%20allow%20users%20only%20to%20save%20contacts%20from%20within%20the%20native%20iOS%20Settings%20app%20under%20%22Accounts%20%26amp%3B%20Passwords%22.%20This%20way%20the%20contacts%20are%20treated%20as%20%22company%20documents%22%20and%20therefore%20not%20visible%20for%20apps%20like%20WhatsApp%20and%20Co.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%20my%20problem%20is%2C%20that%20some%20users%20would%20like%20to%20use%20their%20private%20hotmail%20account%20in%20the%20Outlook%20App%20and%20sync%20their%20private%20contacts%20which%20they%20cannot%20do%20because%20the%20option%20to%20save%20contacts%20is%20disabled%20for%20the%20whole%20Outlook%20app.%20I%20would%20need%20to%20make%20this%20restriction%20only%20for%20the%20company%20account.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20hope%20that%20everything%20is%20understandable.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-583030%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Use%20Intune%20custom%20profile%20settings%20with%20the%20iOS%20Native%20Contacts%20App%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-583030%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F146090%22%20target%3D%22_blank%22%3E%40Labinot%20Jashanica%3C%2FA%3E%26nbsp%3B-%20only%20EAS%20profiles%20pushed%20down%20via%20an%20MDM%20solution%20can%20have%20%22managed%20contacts%22.%20Apple%20does%20not%20provide%20a%20way%20for%20third-party%20solutions%20to%20create%20%22managed%20contacts%22.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAn%20alternative%20solution%20is%20to%20minimize%20the%20data%20that%20is%20exported%20via%20our%20contact%20field%20sync%20controls%20using%20App%20Protection%20Policies.%20See%20%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Fomappconfig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Faka.ms%2Fomappconfig%3C%2FA%3E%20and%26nbsp%3BCourtenay%E2%80%99s%20blog%20(%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fblogs.technet.microsoft.com%252Fcbernier%252F2018%252F11%252F01%252Foutlook-app-configuration-contact-field-export-control%252F%26amp%3Bdata%3D02%257C01%257Crosssmi%2540exchange.microsoft.com%257C7d78ae3f81064f4da16608d6b9352759%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636900035324155602%26amp%3Bsdata%3DW%252FFvBCyHaU%252FqDuMdMk6z%252BtmnayqwZvJPCgeTNuyl7FQ%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fcbernier%2F2018%2F11%2F01%2Foutlook-app-configuration-contact-field-export-control%2F%3C%2FA%3E).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-298453%22%20slang%3D%22en-US%22%3ESupport%20Tip%3A%20Enabling%20Outlook%20iOS%20Contact%20Sync%20with%20iOS12%20MDM%20Controls%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-298453%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3EBy%20Ross%20Smith%2C%20IV%20%7C%20Principal%20Program%20Manager%20on%20the%20Enterprise%20Mobility%20and%20Customer%20Experience%20Engineering%20Team%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ESummary%3A%3C%2FSTRONG%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20documented%20in%20%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Ftechcommunity.microsoft.com%252Ft5%252FIntune-Customer-Success%252FSupport-Tip-iOS-11-3-and-Native-Contacts-App%252Fba-p%252F280092%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257C8d0ed91419f74ab3c90308d660440ea2%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636802242753257180%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3D2GXwSYYSj7ijPgMgcccVchew%252FGzSFaTCP02VwHGpgRI%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3ESupport%20Tip%3A%20iOS%2011.3%20and%20Native%20Contacts%20App%3C%2FA%3E%2C%20with%20%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fsupport.apple.com%252Fen-us%252FHT208749%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257C8d0ed91419f74ab3c90308d660440ea2%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636802242753267188%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3DwU5AHA8dx7xDyqHOSk6wgEQaXNkXGmcSFlktXfSSf%252Fs%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3EiOS%2011.3%3C%2FA%3E%2C%20Apple%20changed%20the%20behavior%20of%20two%20device%20restriction%20controls%20to%20limit%20access%20to%20the%20native%20iOS%20Contacts%20app.%20Customers%20noted%20that%20Outlook%20for%20iOS%20was%20prevented%20from%20syncing%20Outlook%E2%80%99s%20contacts%20to%20the%20native%20iOS%20Contacts%20app.%20With%20iOS12.1%20(it%20was%20iOS%2012%2C%20but%20Apple%20put%20a%20fix%20into%2012.1)%2C%20Apple%20provided%20additional%20device%20restriction%20controls%20to%20influence%20the%20behavior%20of%20the%20native%20iOS%20contacts%20app.%20You%20can%20now%20use%20Intune%20to%20c%3CSPAN%3Eonfigure%20the%20contact%20device%20restriction%20settings%20in%20the%20UI%3C%2FSPAN%3E%20to%20allow%20or%20block%20Outlook%20for%20iOS%E2%80%99s%20ability%20to%20save%20contacts%20to%20the%20native%20iOS%20Contacts%20app.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20support%20tip%20outlines%20the%20configuration%20options%20to%20control%20managed%20contacts%20transfer%20between%20Outlook%20mobile%20and%20the%20native%20iOS%20contacts%20app.%26nbsp%3B%20In%20particular%2C%20the%20%E2%80%9CEnabling%20Save%20Contacts%E2%80%9D%20topic%20describes%20how%20to%20restore%20the%20pre-iOS%2011.3%20for%20sharing%20contacts%20on%20enrolled%20devices.%20%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EDetails%3A%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EAs%20documented%20in%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FSupport-Tip-iOS-11-3-and-Native-Contacts-App%2Fba-p%2F280092%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3ESupport%20Tip%3A%20iOS%2011.3%20and%20Native%20Contacts%20App%3C%2FA%3E%2C%20with%20%3CA%20href%3D%22https%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT208749%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3EiOS%2011.3%3C%2FA%3E%2C%20Apple%20changed%20the%20behavior%20of%20the%20following%20device%20restriction%20controls%20to%20limit%20access%20to%20the%20native%20iOS%20Contacts%20app%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22107%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22259%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20name%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2270%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20value%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22106%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EDescription%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2279%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EImpacts%20Outlook%20for%20iOS%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22107%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20managed%20to%20unmanaged%20apps%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22259%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromManagedToUnmanaged%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2270%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3ETrue%20(default)%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%222%22%3EFalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22106%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EWhen%20set%20to%20false%2C%20this%20setting%20prevents%20writing%20to%20iOS%20Contacts%20app%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2279%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EYes%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22107%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20unmanaged%20to%20managed%20apps%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22259%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromUnmanagedToManaged%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2270%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3ETrue%20(default)%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%222%22%3EFalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22106%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EWhen%20set%20to%20false%2C%20this%20setting%20prevents%20reading%20from%20iOS%20Contacts%20app%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2279%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EYes%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWhen%20either%20of%20these%20settings%20are%20configured%20on%20enrolled%20devices%2C%20Outlook%20for%20iOS%20is%20prevented%20from%20syncing%20Outlook%E2%80%99s%20contacts%20to%20the%20native%20iOS%20Contacts%20app.%20The%20first%20setting%20prevents%20Outlook%20for%20iOS%20from%20writing%20(e.g.%2C%20saving%20a%20new%20contact).%20The%20second%20setting%20prevents%20Outlook%20for%20iOS%20from%20reading%20(e.g.%2C%20executing%20the%20reconciliation%20subroutine%2C%20which%20removes%20duplicates).%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWith%20iOS12.1%2C%20Apple%20provided%20additional%20device%20restriction%20controls%20to%20influence%20the%20behavior%20of%20the%20native%20iOS%20contacts%20app%3A%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2279%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22228%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20name%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2256%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20value%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22210%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EDescription%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2254%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EImpacts%20Outlook%20for%20iOS%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2279%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EManaged%20apps%20write%20to%20unmanaged%20contacts%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22228%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowManagedToWriteUnmanagedContacts%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2256%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3ETrue%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%222%22%3EFalse%20(default)%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22210%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EWhen%20set%20to%20true%2C%20this%20setting%20allows%20writing%20to%20iOS%20Contacts%20app%20(if%20allowOpenFromManagedToUnmanaged%20%3D%20false)%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2254%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EYes%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2279%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EUnmanaged%20apps%20read%20managed%20contacts%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22228%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowUnmanagedToReadManagedContacts%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2256%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3ETrue%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%222%22%3EFalse%20(default)%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22210%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EWhen%20set%20to%20true%2C%20this%20setting%20allows%20unmanaged%20apps%20to%20access%20managed%20contacts%20(if%20allowOpenFromManagedToUnmanaged%20%3D%20false)%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2254%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3ENo%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESpecific%20combinations%20of%20these%20three%20device%20restriction%20controls%20can%20either%20allow%20or%20block%20Outlook%20for%20iOS%E2%80%99s%20ability%20to%20save%20contacts%20to%20the%20native%20iOS%20Contacts%20app.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EEnabling%20Save%20Contacts%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EFor%20enrolled%20devices%2C%20either%20of%20the%20following%20device%20restriction%20configurations%20will%20enable%20Outlook%20for%20iOS%20to%20save%20contacts%20into%20the%20native%20iOS%20Contacts%20app%3A%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20name%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20value%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20managed%20to%20unmanaged%20apps%20not%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromManagedToUnmanaged%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20unmanaged%20to%20managed%20apps%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromUnmanagedToManaged%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Etrue%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EManaged%20apps%20write%20to%20unmanaged%20contacts%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowManagedToWriteUnmanagedContacts%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Etrue%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20name%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20value%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20managed%20to%20unmanaged%20apps%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromManagedToUnmanaged%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Etrue%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20unmanaged%20to%20managed%20apps%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromUnmanagedToManaged%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Etrue%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3ENOTE%20-%20carefully%20consider%20%3CSPAN%3EallowOpenFromManagedToUnmanaged%20%3C%2FSPAN%3Eimplications%20prior%20to%20changing%20your%20configuration%20as%20it%20will%20allow%20managed%20data%20to%20be%20opened%20in%20unmanaged%20apps.%20%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EPreventing%20Save%20Contacts%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EFor%20enrolled%20devices%2C%20the%20following%20device%20restriction%20configuration%20will%20prevent%20Outlook%20for%20iOS%20from%20saving%20contacts%20into%20the%20native%20iOS%20Contacts%20app%20(however%2C%20Outlook%20for%20iOS%20will%20not%20report%20any%20errors)%3A%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20name%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20value%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20managed%20to%20unmanaged%20apps%20not%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromManagedToUnmanaged%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EManaged%20apps%20write%20to%20unmanaged%20contacts%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowManagedToWriteUnmanagedContacts%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%3C%2FFONT%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWith%20any%20of%20the%20below%20device%20restriction%20configurations%20deployed%20to%20enrolled%20devices%2C%20users%20will%20see%20the%20following%20prompt%20when%20attempting%20to%20enable%20Save%20Contacts%20in%20Outlook%20for%20iOS%3A%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20539px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F62479i1E9D58E26912B988%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22RossPost_enableiCLoud.PNG%22%20title%3D%22RossPost_enableiCLoud.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20prompt%20occurs%20because%20Outlook%20for%20iOS%20is%20unable%20to%20access%20and%20read%20from%20the%20native%20iOS%20contacts%20container.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20name%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20value%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20managed%20to%20unmanaged%20apps%20not%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromManagedToUnmanaged%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20unmanaged%20to%20managed%20apps%20not%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromUnmanagedToManaged%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EManaged%20apps%20write%20to%20unmanaged%20contacts%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowManagedToWriteUnmanagedContacts%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20name%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20value%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20managed%20to%20unmanaged%20apps%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromManagedToUnmanaged%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Etrue%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20unmanaged%20to%20managed%20apps%20not%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromUnmanagedToManaged%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20name%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3EControl%20value%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20managed%20to%20unmanaged%20apps%20not%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromManagedToUnmanaged%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EOpening%20documents%20from%20unmanaged%20to%20managed%20apps%20not%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowOpenFromUnmanagedToManaged%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Efalse%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22131%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EManaged%20apps%20write%20to%20unmanaged%20contacts%20allowed%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22275%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3EallowManagedToWriteUnmanagedContacts%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22129%22%3E%3CP%3E%3CFONT%20size%3D%222%22%3Etrue%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EHow%20do%20I%20deploy%20the%20new%20settings%3F%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EStarting%20January%2010%2C%202019%20with%20the%201812%20release%2C%20you%20can%20now%20configure%20the%20contact%20device%20restriction%20settings%20in%20the%20UI.%20Here's%20screen%20shots%20of%20where%20you%20can%20configure%20them%3A%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20578px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F65871i825E77CB3CF63BA8%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Allow%20Contacts.PNG%22%20title%3D%22Allow%20Contacts.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnd%20the%20default%20settings%20are%20here%3A%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20577px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F65872i958DEE31581CB068%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22default%20settings.PNG%22%20title%3D%22default%20settings.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EYou%20can%20read%20more%20about%20how%20to%20deploy%20the%20new%20settings%20through%20the%20documentation%20here%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fen-us%252Fintune%252Fdevice-restrictions-configure%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257C397fd08989254eebb0a508d6776ccf6e%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636827706564993384%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3DfcpSerdXwpgo5yfyQMx29x5yr%252Bm9%252B0Z3cENvAAabWw8%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fdevice-restrictions-configure%3C%2FA%3E%3B%20or%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fen-us%252Fintune%252Fdevice-restrictions-ios%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257C397fd08989254eebb0a508d6776ccf6e%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636827706564993384%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3D7QaWDn5z5%252Fv1xmUIyiNA2Spv2RNgvV4Dl0LzwQgzhos%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fdevice-restrictions-ios%3C%2FA%3E%20for%20more%20information.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENOTE%3A%20There%20is%20a%20UI%20bug%20that%20indicates%20that%20the%20%22Allow%20managed%20apps%20to%20write%20contacts%20to%20unmanaged%20contacts%20accounts%22%20and%20%22Allow%20unmanaged%20apps%20to%20read%20from%20managed%20contacts%20accounts%22%20both%20are%20supervised%20only.%20That%20is%20not%20the%20case%20-%20you%20do%20not%20need%20supervised%20to%20work%20with%20this%20feature.%20This%20is%20a%20UI%20bug%20that%20will%20be%20fixed%20in%20a%20future%20release.%20There's%20no%20service-side%20check%20for%20supervised%20for%20these%20features.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20569px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F65873iA53E851B53AB710B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22supervised.png%22%20title%3D%22supervised.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUpdated%201%2F11%2F19%20with%20strikethrough%20since%20we%20added%20the%20contact%20controls%3A%3CSTRIKE%3E%20Currently%2C%20the%20iOS12%20contact%20controls%20are%20not%20available%20in%20Intune%E2%80%99s%20device%20restrictions%20profile%20configuration.%26nbsp%3B%3C%2FSTRIKE%3E%20We%20are%20leaving%20how%20to%20deploy%20a%20custom%20profile%20if%20that's%20something%20you'd%20like%20to%20do%20in%20the%20future.%20We'd%20recommend%20though%20you%20use%20the%20settings%20in%20the%20UI.%26nbsp%3B%20However%2C%20you%20can%20deploy%20a%20custom%20profile%20to%20enrolled%20iOS%20devices%20to%20enable%20the%20allowManagedToWriteUnmanagedContacts%20control.%20%3CSPAN%3EFor%20information%20on%20how%20to%20deploy%20a%20custom%20configuration%2C%20see%20%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fcustom-settings-ios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fcustom-settings-ios%3C%2FA%3E.%20When%20a%20user%20can%20save%20contacts%2C%20they%20will%20see%20an%20experience%20similar%20to%20the%20following%3A%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20662px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F62341i9E5F18997E3D49ED%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22RossPost12_10_18_IMG_0700.PNG%22%20title%3D%22RossPost12_10_18_IMG_0700.PNG%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EA%20sample%20script%20is%20provided%20below%20(this%20sample%20assumes%20that%20another%20profile%20already%20exists%20that%20has%20configured%20allowOpenFromManagedToUnmanaged%3Dfalse%20and%20allowOpenFromUnmanagedToManaged%3Dtrue).%20As%20with%20all%20scripts%2C%20be%20sure%20to%20test!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%222%22%3E%3CBR%20%2F%3E%3CA%20href%3D%22http%3A%2F%2Fwww.apple.com%2FDTDs%2FPropertyList-1.0.dtd%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.apple.com%2FDTDs%2FPropertyList-1.0.dtd%3C%2FA%3E%22%26gt%3B%3CBR%20%2F%3E%3CPLIST%20version%3D%22%26quot%3B1.0%26quot%3B%22%3E%3CBR%20%2F%3E%3CDICT%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadContent%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CARRAY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CDICT%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadDescription%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3EConfigures%20restrictions%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadDisplayName%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3ERestrictions%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadIdentifier%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3Ecom.apple.applicationaccess.5301A395-9C13-41BD-A0E8-D35F4EE21805%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadType%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3Ecom.apple.applicationaccess%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadUUID%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3E5301A395-9C13-41BD-A0E8-D35F4EE21805%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadVersion%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CINTEGER%3E1%3C%2FINTEGER%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EallowManagedToWriteUnmanagedContacts%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CTRUE%3E%3C%2FTRUE%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FDICT%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FARRAY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadDisplayName%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3EUntitled%202%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadIdentifier%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3EContoso-iMac.1988A13E-0734-4215-A83B-19F21007FA52%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadRemovalDisallowed%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CFALSE%3E%3C%2FFALSE%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadType%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3EConfiguration%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadUUID%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CSTRING%3EF6B505A3-29D8-40A8-BF12-BF072E912E77%3C%2FSTRING%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CKEY%3EPayloadVersion%3C%2FKEY%3E%3CBR%20%2F%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3CINTEGER%3E1%3C%2FINTEGER%3E%3CBR%20%2F%3E%3C%2FDICT%3E%3CBR%20%2F%3E%3C%2FPLIST%3E%3C%2FFONT%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBlog%20post%20updated%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E12%2F11%2F18%20with%20enable%20iCloud%20contacts%20sync%20prompt%20screen%20shot%3C%2FLI%3E%0A%3CLI%3E12%2F12%2F18%20added%20summary%20to%20the%20post%26nbsp%3B%3C%2FLI%3E%0A%3CLI%3E%26nbsp%3B1%2F11%2F19%20updated%20with%20new%20settings%20shipped%20in%20January%3B%20also%20updated%20iOS%2012%20to%20iOS%2012.1%20due%20to%20an%20Apple%20bug%20fix%3C%2FLI%3E%0A%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-298453%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20this%20post%2C%20Ross%20shares%20how%20you%20can%20either%20allow%20or%20block%20Outlook%20for%20iOS%E2%80%99s%20ability%20to%20save%20contacts%20to%20the%20native%20iOS%20Contacts%20app.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-298453%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EiOS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eknown%20issue%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESupport%20Tip%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E

By Ross Smith, IV | Principal Program Manager on the Enterprise Mobility and Customer Experience Engineering Team

 

Summary: 

As documented in Support Tip: iOS 11.3 and Native Contacts App, with iOS 11.3, Apple changed the behavior of two device restriction controls to limit access to the native iOS Contacts app. Customers noted that Outlook for iOS was prevented from syncing Outlook’s contacts to the native iOS Contacts app. With iOS12.1 (it was iOS 12, but Apple put a fix into 12.1), Apple provided additional device restriction controls to influence the behavior of the native iOS contacts app. You can now use Intune to configure the contact device restriction settings in the UI to allow or block Outlook for iOS’s ability to save contacts to the native iOS Contacts app.

 

This support tip outlines the configuration options to control managed contacts transfer between Outlook mobile and the native iOS contacts app.  In particular, the “Enabling Save Contacts” topic describes how to restore the pre-iOS 11.3 for sharing contacts on enrolled devices.  

 

Details:

As documented in Support Tip: iOS 11.3 and Native Contacts App, with iOS 11.3, Apple changed the behavior of the following device restriction controls to limit access to the native iOS Contacts app:

 

Control 

Control name 

Control value 

Description 

Impacts Outlook for iOS 

Opening documents from managed to unmanaged apps  

allowOpenFromManagedToUnmanaged 

True (default);  

False 

When set to false, this setting prevents writing to iOS Contacts app 

Yes 

Opening documents from unmanaged to managed apps 

allowOpenFromUnmanagedToManaged 

True (default);  

False 

When set to false, this setting prevents reading from iOS Contacts app 

Yes 

 

When either of these settings are configured on enrolled devices, Outlook for iOS is prevented from syncing Outlook’s contacts to the native iOS Contacts app. The first setting prevents Outlook for iOS from writing (e.g., saving a new contact). The second setting prevents Outlook for iOS from reading (e.g., executing the reconciliation subroutine, which removes duplicates).  

 

With iOS12.1, Apple provided additional device restriction controls to influence the behavior of the native iOS contacts app: 

 

Control 

Control name 

Control value 

Description 

Impacts Outlook for iOS 

Managed apps write to unmanaged contacts 

allowManagedToWriteUnmanagedContacts  

True;  

False (default) 

When set to true, this setting allows writing to iOS Contacts app (if allowOpenFromManagedToUnmanaged = false) 

Yes 

Unmanaged apps read managed contacts 

allowUnmanagedToReadManagedContacts  

True;  

False (default) 

When set to true, this setting allows unmanaged apps to access managed contacts (if allowOpenFromManagedToUnmanaged = false) 

No 

 

Specific combinations of these three device restriction controls can either allow or block Outlook for iOS’s ability to save contacts to the native iOS Contacts app.  

 

Enabling Save Contacts 

For enrolled devices, either of the following device restriction configurations will enable Outlook for iOS to save contacts into the native iOS Contacts app: 

 

Control 

Control name 

Control value 

Opening documents from managed to unmanaged apps not allowed 

allowOpenFromManagedToUnmanaged   

false 

Opening documents from unmanaged to managed apps allowed 

allowOpenFromUnmanagedToManaged 

true 

Managed apps write to unmanaged contacts allowed 

allowManagedToWriteUnmanagedContacts  

true 

 

Control 

Control name 

Control value 

Opening documents from managed to unmanaged apps allowed 

allowOpenFromManagedToUnmanaged   

true 

Opening documents from unmanaged to managed apps allowed 

allowOpenFromUnmanagedToManaged 

true 

NOTE - carefully consider allowOpenFromManagedToUnmanaged implications prior to changing your configuration as it will allow managed data to be opened in unmanaged apps.   

 

 

Preventing Save Contacts 

For enrolled devices, the following device restriction configuration will prevent Outlook for iOS from saving contacts into the native iOS Contacts app (however, Outlook for iOS will not report any errors): 

Control 

Control name 

Control value 

Opening documents from managed to unmanaged apps not allowed 

allowOpenFromManagedToUnmanaged   

false 

Managed apps write to unmanaged contacts allowed 

allowManagedToWriteUnmanagedContacts  

false 

 

With any of the below device restriction configurations deployed to enrolled devices, users will see the following prompt when attempting to enable Save Contacts in Outlook for iOS:

RossPost_enableiCLoud.PNG

 

This prompt occurs because Outlook for iOS is unable to access and read from the native iOS contacts container. 

 

Control 

Control name 

Control value 

Opening documents from managed to unmanaged apps not allowed 

allowOpenFromManagedToUnmanaged   

false 

Opening documents from unmanaged to managed apps not allowed 

allowOpenFromUnmanagedToManaged 

false 

Managed apps write to unmanaged contacts allowed 

allowManagedToWriteUnmanagedContacts  

false 

 

Control 

Control name 

Control value 

Opening documents from managed to unmanaged apps allowed 

allowOpenFromManagedToUnmanaged   

true 

Opening documents from unmanaged to managed apps not allowed 

allowOpenFromUnmanagedToManaged 

false 

 

Control 

Control name 

Control value 

Opening documents from managed to unmanaged apps not allowed 

allowOpenFromManagedToUnmanaged   

false 

Opening documents from unmanaged to managed apps not allowed 

allowOpenFromUnmanagedToManaged 

false 

Managed apps write to unmanaged contacts allowed 

allowManagedToWriteUnmanagedContacts  

true 

 

How do I deploy the new settings? 

Starting January 10, 2019 with the 1812 release, you can now configure the contact device restriction settings in the UI. Here's screen shots of where you can configure them:

Allow Contacts.PNG

 

And the default settings are here:

default settings.PNG

You can read more about how to deploy the new settings through the documentation here:

 

NOTE: There is a UI bug that indicates that the "Allow managed apps to write contacts to unmanaged contacts accounts" and "Allow unmanaged apps to read from managed contacts accounts" both are supervised only. That is not the case - you do not need supervised to work with this feature. This is a UI bug that will be fixed in a future release. There's no service-side check for supervised for these features. 

supervised.png

 

 

Updated 1/11/19 with strikethrough since we added the contact controls: Currently, the iOS12 contact controls are not available in Intune’s device restrictions profile configuration.  We are leaving how to deploy a custom profile if that's something you'd like to do in the future. We'd recommend though you use the settings in the UI.  However, you can deploy a custom profile to enrolled iOS devices to enable the allowManagedToWriteUnmanagedContacts control. For information on how to deploy a custom configuration, see https://docs.microsoft.com/intune/custom-settings-ios. When a user can save contacts, they will see an experience similar to the following:

RossPost12_10_18_IMG_0700.PNG 

 

A sample script is provided below (this sample assumes that another profile already exists that has configured allowOpenFromManagedToUnmanaged=false and allowOpenFromUnmanagedToManaged=true). As with all scripts, be sure to test!

 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadDescription</key>
            <string>Configures restrictions</string>
            <key>PayloadDisplayName</key>
            <string>Restrictions</string>
            <key>PayloadIdentifier</key>
            <string>com.apple.applicationaccess.5301A395-9C13-41BD-A0E8-D35F4EE21805</string>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadUUID</key>
            <string>5301A395-9C13-41BD-A0E8-D35F4EE21805</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>allowManagedToWriteUnmanagedContacts</key>
            <true/>
          </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Untitled 2</string>
    <key>PayloadIdentifier</key>
    <string>Contoso-iMac.1988A13E-0734-4215-A83B-19F21007FA52</string>
    <key>PayloadRemovalDisallowed</key>
    <false/>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>F6B505A3-29D8-40A8-BF12-BF072E912E77</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>
 

 

Blog post updated:

  • 12/11/18 with enable iCloud contacts sync prompt screen shot
  • 12/12/18 added summary to the post 
  •  1/11/19 updated with new settings shipped in January; also updated iOS 12 to iOS 12.1 due to an Apple bug fix
25 Comments
Senior Member

Hi,

thanks for sharing these new capabilities with iOS 12.

Is there any chance to sync contacts from Outlook to the native App AND protected them from been accessed by third-party apps? or did I miss anything?

BR

Simon

Microsoft
@Simon - We have no way to create "managed contacts" within the iOS Contacts app. If you want to minimize data leakage, we recommend using our Contact Field Sync controls (http://aka.ms/omappconfig) that are available with our App Protection Policies and limit what data is exported to the native contacts app.
Senior Member

Just as a sanity check...

We don't currently use device restrictions (as we have a mix of enrolled and MAMWE), so we use App Protection Policies to restrict data transfer to "policy managed apps" but have not disabled Contact Sync

 

Would we need to apply any of these changes, or are they only applying to those restricting via the device configurations rather than app protection policies?

thanks

Microsoft
@John - If you aren't using device configuration policies to control device and app behavior, this won't affect your deployment.
Occasional Contributor

how does one in a hybrid Intune deployment go about deploying this new configuration setting?

@Myles Taylor just checked with our hybrid lead. These settings are not in hybrid. Per the announcement here  - https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Move-from-Hybrid-Mobile-Device-Manage... - do be aware that hybrid MDM is nearing end of support. FastTrack is resource that may be available to you to help move from hybrid to stand alone.

Visitor

Is it also possible to configure the button "save contacts"? I want to auto enable it for all users and this configuration is only for setting up restrictions.

Occasional Contributor

@Intune Support Teamthanks for the clarification, all to familiar with the upcoming support change regarding hybrid deployments, slowly but surely we're migrating over. 

Microsoft
@JoeriJ - Soon! :)
Frequent Visitor

@Ross Smith IV  Is this available only for supervised devices? We're implementing Outlook with Intune MDM but the contacts are not syncing with local Contacts on iOS. The weird  part is that on my iPhone it did not sync but  on my iPad it did.

Microsoft
@Charlies_Silva - No, this does not require supervised devices (that's a bug in the Intune UI that will removed later this month). If you are using the same account on both devices, Outlook recognizes that you have contact sync enabled on one iOS device and prevents you from enabling it on a second iOS device. If you have contacts enabled in iCloud, then your exported contacts will be available on all of your iOS devices.
Frequent Visitor

Thank you @Ross Smith IV . We were finally able to allow the contact export to iOS and keep corporate data protected.

Occasional Visitor

Hi, I am testing the "Retire device" function in Intune.  The behavior is not as expected.  The managed apps are deleted from the device after synching, but company contacts on the device are still present.  Is there a setting that needs to be activated to also remove company contacts that were synched with Outlook?  I would have thought this would be done by default.  iOs version 12.2 with contacts toggle set to enable in the Outlook app before wipe.  Thank you.

Microsoft
@skoropi - That is currently by design. When you issue a retire command, that instructs the OS to uninstall any pinned apps to the management profile. An OS uninstall does not trigger any function within the app to do cleanup (does not trigger profile removal), and that results in the exported contacts being orphaned. This is standard OS behavior (same as user intentionally uninstalling an app). The only way the exported contacts can be removed is through a profile removal within Outlook. Our recommendation is to issue an App Protection Policy selective wipe prior to issuing a device retire. Selective Wipe triggers Outlook's profile removal process.
Valued Contributor
@Charles_Silva: how did you accomplish this? I want to allow Outlook to Save Contacts, but block any other app from reading them.
Frequent Visitor

Hi @Ivan Unger ,

 

I allowed Outlook app contacts to be synced with the local Contacts app. From there I don't have management on the contact data that had been exported (other apps have access to contact information as it normally would). I don't know if you can allow the export and then limit which apps can have access to exported data.

In the previous comment Ross explained how you can force remove the data if you want to retire de device but if I understood correctly, that's not what you're trying to acomplish.

Valued Contributor

Okay, I've  misunderstood your comment then.

Valued Contributor

Hi @Ross Smith IV ,

 

I'm having trouble understanding something here: When utilizing the Outlook MAM Policy to force-write contacts to the local iOS Contacts app, are the contacts considered managed or unmanaged?

 

If they are managed, how do I use this setting to block 3rd party from accessing these contacts?

I see this setting here in your post allowUnmanagedToReadManagedContacts  but I don't know which Intune UI control this is, since the wording is different. Could you possibly update your wording in this blog post to reflect the current Intune implementation.

Microsoft
@Ivan Unger - The contacts are considered unmanaged. Only managed EAS MDM profiles are able to create "managed contacts". The setting "allowUnmanagedToReadManagedContacts" - is the device restrictions - app store, doc viewing, gaming "Allow unmanaged apps to read from managed contacts accounts". This is documented at https://docs.microsoft.com/en-us/intune/device-restrictions-ios.
New Contributor

Hi, 

 

is it possible to somehow differentiate between company account and personal (hotmail) account? I would like to disable the Save Contacts option in the Outlook Settings for company accounts only but I want to give users the option to save their personal contacts from their private hotmail account.

 

Best regards,

Labinot

Senior Member

Hi @Labinot Jashanica ,

 

you can use MAM Policies to block contact sync for your business Profile.

https://docs.microsoft.com/en-us/intune/app-protection-policy-settings-ios#functionality

BR

Simon

New Contributor

Hi @Simon Scharschinger 

 

thank you for your reply. Could you further elaborate on the MAM policies? I looked into the articel you provided. However, I was not able to find the needed options and settings which would fit my requirements. 

 

Best regards,

Labinot

Senior Member

Hi @Labinot Jashanica ,

in the documentation, you'll find a setting 'Sync app with native contacts app'. This is the setting you want to configure.

BR

Simon

New Contributor

hi @Simon Scharschinger,

sadly this is not a feasible solution because of the following reasons:

 

First of all, when the option to save contacts in Outlook is enabled the company contacts are not saved to the native contact app as a type of "company document" but is instead synced into the contact app as a normal contact which allows non-managed apps (such as WhatsApp) to sync these company contacts. I haven't found a solution yet that allows me to sync company contacts from the Outlook app settings into the native contact app without non-managed apps being able to access and sync them. In my device configuration profile I blocked that unmanaged apps can view corporate documents already. Additionally I set the setting "Send Org data to other apps" in my app protection policy to "Policy managed apps".

 

The only way for me to prevent this from happening was as follows:

Disable the option to sync contacts in the Outlook app and allow users only to save contacts from within the native iOS Settings app under "Accounts & Passwords". This way the contacts are treated as "company documents" and therefore not visible for apps like WhatsApp and Co. 

 

Now my problem is, that some users would like to use their private hotmail account in the Outlook App and sync their private contacts which they cannot do because the option to save contacts is disabled for the whole Outlook app. I would need to make this restriction only for the company account. 

 

I hope that everything is understandable. 

Microsoft

@Labinot Jashanica - only EAS profiles pushed down via an MDM solution can have "managed contacts". Apple does not provide a way for third-party solutions to create "managed contacts".

 

An alternative solution is to minimize the data that is exported via our contact field sync controls using App Protection Policies. See http://aka.ms/omappconfig and Courtenay’s blog (https://blogs.technet.microsoft.com/cbernier/2018/11/01/outlook-app-configuration-contact-field-expo...).