Home

Copy & Paste Restriction (App Protection Policy) not working properly

%3CLINGO-SUB%20id%3D%22lingo-sub-353927%22%20slang%3D%22en-US%22%3ECopy%20%26amp%3B%20Paste%20Restriction%20(App%20Protection%20Policy)%20not%20working%20properly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-353927%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20everyone%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei%20set%20the%20following%20settings%20for%20my%20devices%20and%20discovered%20some%20problems%3A%3C%2FP%3E%3CP%3E%3CSTRONG%3EApp%20Protection%20Policy%3C%2FSTRONG%3E%3C%2FP%3E%3COL%3E%3CLI%3EAssigned%20to%20my%20Test-Device%20(iOS)%3C%2FLI%3E%3CLI%3ETargeted%20Apps%20%3D%20all%20Default%20MS%20Apps%20(Outlook%2C%20Word%2C%20Excel%2C%20...)%3C%2FLI%3E%3CLI%3EProperties%20%5C%20Data%20protection%3COL%3E%3CLI%3EBackup%20Org%20data%20to%20iTunes%20and%20iCloud%20backups%20%3D%20Block%3C%2FLI%3E%3CLI%3ESend%20Org%20data%20to%20other%20apps%20%3D%20Policy%20managed%20apps%20with%20Open-In%2FShare%20filtering%3C%2FLI%3E%3CLI%3EReceive%20data%20from%20other%20apps%20%3D%20All%20apps%3C%2FLI%3E%3CLI%3ESave%20copies%20of%20Org%20data%20%3D%20Block%3C%2FLI%3E%3CLI%3EAllow%20user%20to%20save%20copies%20to%20selected%20services%20%3D%20OneDrive%20%26amp%3B%20SharePoint%3C%2FLI%3E%3CLI%3ERestrict%20cut%2C%20copy%20and%20paste%20between%20other%20apps%20%3D%20Policy%20managed%20apps%20with%20paste%20in%3C%2FLI%3E%3C%2FOL%3E%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%3CSTRONG%3EThe%20result%20is%20the%20following%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CTABLE%20border%3D%221%22%20cellspacing%3D%220%22%20cellpadding%3D%220%22%3E%3CTBODY%3E%3CTR%3E%3CTD%3E%3CP%3ESource%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EApple%20Notes%20App%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EWord%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EExcel%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EOutlook%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%3CSTRONG%3EEverything%20works%20as%20aspected.%20I'm%20able%20to%20copy%20from%20outside%20(unmanaged)%20to%20inside%20(managed)%3C%2FSTRONG%3E%3C%2FP%3E%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CTABLE%20border%3D%221%22%20cellspacing%3D%220%22%20cellpadding%3D%220%22%3E%3CTBODY%3E%3CTR%3E%3CTD%3E%3CP%3ESource%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EWord%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EWord%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EExcel%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EOutlook%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EApple%20Notes%20App%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%3CSTRONG%3ESomething%20works%20as%20aspected.%20I'm%20able%20to%20copy%20from%20inside%20Word%20(managed)%20to%20inside%20other%20managed%20Apps.%20But%3A%20I%20was%20able%20to%20copy%20from%20Word%20and%20paste%20to%20Apple%20Notes%20App.%20This%20shouldn't%20work!%3C%2FSTRONG%3E%3C%2FP%3E%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CTABLE%20border%3D%221%22%20cellspacing%3D%220%22%20cellpadding%3D%220%22%3E%3CTBODY%3E%3CTR%3E%3CTD%3E%3CP%3ESource%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EOutlook%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EWord%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EExcel%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EOutlook%20(managed)%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3EDestination%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%3EApple%20Notes%20App%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%3CSTRONG%3ENow%20things%20getting%20strange.%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CSTRONG%3EI%20copied%20some%20text%20from%20outlook%20(managed)%20and%20paste%20it%20in%20different%20other%20Apps.%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CSTRONG%3ENone%20of%20it%20worked.%20I%20just%20was%20able%20to%20copy%20from%20outlook%20to%20outlook.%3C%2FSTRONG%3E%3C%2FP%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-353927%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-363308%22%20slang%3D%22en-US%22%3ERe%3A%20Copy%20%26amp%3B%20Paste%20Restriction%20(App%20Protection%20Policy)%20not%20working%20properly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-363308%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3Ejust%20to%20reveal%20the%20secret%3A%20(it%20was%20one%20for%20me%20until%20now%20%3AD%3C%2Fimg%3E%20)%3CBR%20%2F%3E%3CBR%20%2F%3EI%20was%20able%20to%20copy%20content%20out%20of%20my%20managed%20Word%20App%20even%20though%20i%20deactivated%20this%20via%20App%20Protection%20Policy.%20I%20wondered%20why...%3CBR%20%2F%3ELong%20story%20short%3A%3CBR%20%2F%3E%3CBR%20%2F%3EWhat%20have%20i%20done%20wrong%3F%3CBR%20%2F%3EI%20opened%20my%20word%20app%20and%20created%20a%20new%2C%20emtpy%20document%2C%20wrote%20some%20sample%20text%20and%20copied%20it%20(successfully)%20in%20my%20note-app%20oder%20my%20chrome%20browser.%3CBR%20%2F%3EThis%20is%20an%20absolutely%20correct%20behaviour.%20This%20new%20document%20isn't%20in%20any%20corporate%20context.%3CBR%20%2F%3EWhen%20opening%20a%20a%20document%20marked%20as%20%22company%20content%22%20e.g.%20from%20a%20onedrive%20connected%20to%20my%20corporate%20account%2C%20i%20was%20not%20able%20to%20copy%20content%20outside.%20(in%20my%20note%20app%20or%20my%20chrome%20browser.)%3CBR%20%2F%3E%3CBR%20%2F%3EThat's%20it.%3CBR%20%2F%3EHopefully%20this%20%22unveiling%22%20is%20helping%20someone%20out.%20%3AD%3C%2Fimg%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EPatrick%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-469766%22%20slang%3D%22en-US%22%3ERe%3A%20Copy%20%26amp%3B%20Paste%20Restriction%20(App%20Protection%20Policy)%20not%20working%20properly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-469766%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20a%20short%20response%2C%20because%20of%20a%20new%20Techcommunity%20Account.%20%3A)%3C%2Fimg%3E%20%5BIgnore%20me%5D%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-469774%22%20slang%3D%22en-US%22%3ERe%3A%20Copy%20%26amp%3B%20Paste%20Restriction%20(App%20Protection%20Policy)%20not%20working%20properly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-469774%22%20slang%3D%22en-US%22%3EBecause%20of%20a%20new%20techcommunity%20account%2C%20this%20is%20just%20a%20short%20response%20to%20follow%20up%20the%20thread.%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E
Deleted
Not applicable

Hi everyone,

 

i set the following settings for my devices and discovered some problems:

App Protection Policy

  1. Assigned to my Test-Device (iOS)
  2. Targeted Apps = all Default MS Apps (Outlook, Word, Excel, ...)
  3. Properties \ Data protection
    1. Backup Org data to iTunes and iCloud backups = Block
    2. Send Org data to other apps = Policy managed apps with Open-In/Share filtering
    3. Receive data from other apps = All apps
    4. Save copies of Org data = Block
    5. Allow user to save copies to selected services = OneDrive & SharePoint
    6. Restrict cut, copy and paste between other apps = Policy managed apps with paste in

The result is the following:

 

Source

Apple Notes App

Destination

Word (managed)

Destination

Excel (managed)

Destination

Outlook (managed)

Everything works as aspected. I'm able to copy from outside (unmanaged) to inside (managed)

 

Source

Word (managed)

Destination

Word (managed)

Destination

Excel (managed)

Destination

Outlook (managed)

Destination

Apple Notes App

Something works as aspected. I'm able to copy from inside Word (managed) to inside other managed Apps. But: I was able to copy from Word and paste to Apple Notes App. This shouldn't work!

 

Source

Outlook (managed)

Destination

Word (managed)

Destination

Excel (managed)

Destination

Outlook (managed)

Destination

Apple Notes App

Now things getting strange.

I copied some text from outlook (managed) and paste it in different other Apps. 

None of it worked. I just was able to copy from outlook to outlook.

3 Replies
Hi,

just to reveal the secret: (it was one for me until now :D )

I was able to copy content out of my managed Word App even though i deactivated this via App Protection Policy. I wondered why...
Long story short:

What have i done wrong?
I opened my word app and created a new, emtpy document, wrote some sample text and copied it (successfully) in my note-app oder my chrome browser.
This is an absolutely correct behaviour. This new document isn't in any corporate context.
When opening a a document marked as "company content" e.g. from a onedrive connected to my corporate account, i was not able to copy content outside. (in my note app or my chrome browser.)

That's it.
Hopefully this "unveiling" is helping someone out. :D


Patrick

Just a short response, because of a new Techcommunity Account. :) [Ignore me]

Because of a new techcommunity account, this is just a short response to follow up the thread. :)
Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
36 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies