Home
%3CLINGO-SUB%20id%3D%22lingo-sub-774108%22%20slang%3D%22en-US%22%3ESupport%20Tip%3A%20Known%20Issue%20Using%20Samsung%20S10%20Series%20and%20Office%20with%20APP%20or%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-774108%22%20slang%3D%22en-US%22%3E%3CP%3EWe%E2%80%99ve%20been%20investigating%20a%20new%20issue%20with%20Samsung%20S10%20series.%20%26nbsp%3BThis%20device%20comes%20with%20Office%20mobile%20preloaded%20on%20the%20device.%20However%2C%20the%20pre-loaded%20version%20of%20Office%20mobile%20cannot%20use%20Conditional%20Access%20or%20Mobile%20Application%20Management%20(MAM%2C%20also%20referred%20to%20as%20APP).%20This%20version%20of%20Office%20can%20only%20be%20downloaded%20from%20Samsung%E2%80%99s%20own%20app%20store.%20An%20end%20user%20can%20sign%20in%20to%20this%20app%20and%20access%20One%20Drive%20and%20Sharepoint%20from%20within%20and%20save%20files%20locally%20to%20the%20device%20without%20Intune%20data%20protection.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20workaround%20this%20and%20apply%20your%20APP%26nbsp%3Baccess%20policies%2C%20first%20you%20need%20to%20know%20which%20version%20of%20Office%20is%20being%20used.%20Here%E2%80%99s%20your%20three%20options%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ecom.microsoft.office.officehubrow%20preinstalled%20on%20Samsung%20devices%20outside%20the%20US%20and%20China%3C%2FFONT%3E%3C%2FLI%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ecom.microsoft.office.officehubhl%20preinstalled%20on%20Samsung%20devices%20in%20the%20US%3C%2FFONT%3E%3C%2FLI%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ecom.microsoft.office.officehub%20this%20one%20is%20available%20in%20China%20stores%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EOnce%20you%20know%20which%20version%20of%20pre-installed%20Office%20you%E2%80%99re%20using%2C%20then%20you%E2%80%99ll%20want%20to%20go%20ahead%20and%20apply%20y%3C%2FFONT%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Eour%20App%20Protection%20Policies%20that%20you%20have%20applied%20to%20Office.%20This%20will%20provide%20APP%20protections%20for%20the%20new%20Office%20app%20in%20the%20same%20way%20that%20you%20currently%20protect%20Office.%20Head%20to%20documentation%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fapp-protection-policies%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fapp-protection-policies%3C%2FA%3Efor%20more%20information%20on%20how%20to%20create%20and%20apply%20policies%20targeted%20to%20specific%20endpoint.%20%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EIntune%20will%20be%20adding%20this%20app%20to%20the%20list%20of%20targeted%20Apps%20in%20the%20Intune%20Admin%20console%20but%20we%20wanted%20you%20to%20be%20aware%20of%20the%20impact%20to%20you%20and%20your%20policies%20if%20these%20devices%20are%20adopted%20in%20your%20environment.%20%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-774108%22%20slang%3D%22en-US%22%3E%3CP%3ERead%20this%20Samsung%20S10%20Series%20and%20Office%20known%20issue.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-774108%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eknown%20issue%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-774543%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Known%20Issue%20Using%20Samsung%20S10%20Series%20and%20Office%20with%20APP%20or%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-774543%22%20slang%3D%22en-US%22%3E%3CP%3EWhy%20i'm%20not%20surprised%20by%20this%3F%20MS%20should%20stop%20this%20practice%20allowing%20mobile%20manufacturers%20to%20bundle%20such%20crappy%20versions%20of%20Office.%20Office%20doesn't%20need%20this%20advertisement%20i%20think.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-774583%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Known%20Issue%20Using%20Samsung%20S10%20Series%20and%20Office%20with%20APP%20or%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-774583%22%20slang%3D%22en-US%22%3E%3CP%3E%3CFONT%3EWhen%20will%20Microsoft%20will%20be%20adding%20this%20app%20to%20the%20list%20of%20targeted%20Apps%20in%20the%20Intune%20Admin%20console%20%3F%3F%3F%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E

We’ve been investigating a new issue with Samsung S10 series.  This device comes with Office mobile preloaded on the device. However, the pre-loaded version of Office mobile cannot use Conditional Access or Mobile Application Management (MAM, also referred to as APP). This version of Office can only be downloaded from Samsung’s own app store. An end user can sign in to this app and access One Drive and Sharepoint from within and save files locally to the device without Intune data protection. 

 

To workaround this and apply your APP access policies, first you need to know which version of Office is being used. Here’s your three options:

 

  • com.microsoft.office.officehubrow preinstalled on Samsung devices outside the US and China
  • com.microsoft.office.officehubhl preinstalled on Samsung devices in the US
  • com.microsoft.office.officehub this one is available in China stores

 

Once you know which version of pre-installed Office you’re using, then you’ll want to go ahead and apply your App Protection Policies that you have applied to Office. This will provide APP protections for the new Office app in the same way that you currently protect Office. Head to documentation here: https://docs.microsoft.com/intune/app-protection-policies for more information on how to create and apply policies targeted to specific endpoint.

 

Intune will be adding this app to the list of targeted Apps in the Intune Admin console but we wanted you to be aware of the impact to you and your policies if these devices are adopted in your environment.

 

2 Comments
Super Contributor

Why i'm not surprised by this? MS should stop this practice allowing mobile manufacturers to bundle such crappy versions of Office. Office doesn't need this advertisement i think.

Senior Member

When will Microsoft will be adding this app to the list of targeted Apps in the Intune Admin console ???