Updated 12/19/19 - The Office Hub Mobile app is now available on the standard app list.
We’ve been investigating a new issue with Samsung S10 series. This device comes with Office mobile preloaded on the device. However, the pre-loaded version of Office mobile cannot use Conditional Access or Mobile Application Management (MAM, also referred to as APP). This version of Office can only be downloaded from Samsung’s own app store. An end user can sign in to this app and access One Drive and Sharepoint from within and save files locally to the device without Intune data protection.
To workaround this and apply your APP access policies, first you need to know which version of Office is being used. Here’s your three options:
- com.microsoft.office.officehubrow preinstalled on Samsung devices outside the US and China
- com.microsoft.office.officehubhl preinstalled on Samsung devices in the US
- com.microsoft.office.officehub this one is available in China stores
Once you know which version of pre-installed Office you’re using, then you’ll want to go ahead and apply your App Protection Policies that you have applied to Office. This will provide APP protections for the new Office app in the same way that you currently protect Office. Head to documentation here: https://docs.microsoft.com/intune/app-protection-policies for more information on how to create and apply policies targeted to specific endpoint.
Intune will be adding this app to the list of targeted Apps in the Intune Admin console but we wanted you to be aware of the impact to you and your policies if these devices are adopted in your environment.
Blog post updates:
- 12/19/19 with an update that this is now resolved. You may now choose the Office Hub app within the standard app list.
Microsoft
