%3CLINGO-SUB%20id%3D%22lingo-sub-1553604%22%20slang%3D%22en-US%22%3EControlling%20Outlook%20for%20Android%20data%20on%20wearable%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1553604%22%20slang%3D%22en-US%22%3E%3CP%3EOutlook%20for%20Android%20supports%20Android%20and%20Tizen%20wearable%20technology.%20When%20the%20Outlook%20app%20is%20installed%20on%20the%20wearable%2C%20the%20user%20can%20receive%20message%20notifications%20and%20event%20reminders%2C%20interact%20with%20messages%2C%20and%20view%20daily%20calendars.%20For%20data%20to%20synchronize%20to%20the%20Outlook%20app%20installed%20on%20Android%20or%20Tizen%20wearable%20devices%2C%20the%20wearable%20must%20be%20connected%20to%20the%20Android%20device%20via%20Bluetooth.%3C%2FP%3E%0A%3CP%3EBy%20default%2C%20Outlook%20for%20Android%20supports%20a%20model%20where%20wearable%20sync%20is%20enabled.%3C%2FP%3E%0A%3CP%3EFor%20more%20information%20on%20what%20Outlook%20scenarios%20are%20specifically%20supported%20on%20Tizen%20wearables%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fgalaxystore.samsung.com%2Fgeardetail%2Fcom.microsoft.office.outlook.tizen%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgalaxystore.samsung.com%2Fgeardetail%2Fcom.microsoft.office.outlook.tizen%3C%2FA%3E.%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1297237032%22%20id%3D%22toc-hId--1297209036%22%3EControlling%20wearables%20with%20Intune%3C%2FH2%3E%0A%3CP%3EFor%20Exchange%20Online%20and%20%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Fhmaom%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eon-premises%20customers%20leveraging%20hybrid%20modern%20authentication%3C%2FA%3E%2C%20Microsoft%20offers%20an%20in-market%20solution%20where%20Intune%20customers%20can%20leverage%20Intune%20App%20Protection%20Policies%20to%20disable%20wearable%20technology.%20This%20solution%20prevents%20any%20data%20from%20being%20synchronized%20to%20the%20wearable%20device%20from%20the%20work%20or%20school%20account%20when%20protected%20by%20an%20Intune%20App%20Protection%20Policy.%20For%20more%20information%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Foutlook-for-ios-and-android%2Foutlook-for-ios-and-android-configuration-with-microsoft-intune%23data-protection-scenarios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDeploying%20Outlook%20for%20iOS%20and%20Android%20app%20configuration%20settings%3C%2FA%3E.%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1190275801%22%20id%3D%22toc-hId-1190303797%22%3EControlling%20wearables%20for%20non-Intune%20customers%3C%2FH2%3E%0A%3CP%3EToday%2C%20Outlook%20for%20Android%20does%20not%20provide%20a%20mechanism%20to%20control%20wearables%20for%20non-Intune%20customers.%3C%2FP%3E%0A%3CP%3EOutlook%20for%20Android%20does%20support%20Exchange%E2%80%99s%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Fexchange-activesync%2Fmobile-device-mailbox-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Emobile%20device%20mailbox%20policy%3C%2FA%3E%20framework.%20Outlook%20for%20Android%20consumes%20the%20mobile%20device%20mailbox%20policy%20and%20acts%20based%20on%20what%20policy%20settings%20are%20configured.%20The%20mobile%20device%20mailbox%20policy%20is%20evaluated%20when%20Outlook%20for%20Android%20connects%20to%20Exchange%20Online.%20Today%2C%20Outlook%20for%20Android%20only%20supports%20the%20PIN%20and%20encryption%20client%20policy%20settings%20(see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2F%2520exchange%2Fclients-and-mobile-in-exchange-online%2Foutlook-for-ios-and-android%2Fmanage-outlook-for-ios-and-android%23using-mobile-device-access-and-mobile-device-mailbox-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EManaging%20Outlook%20for%20iOS%20and%20Android%3C%2FA%3E%20for%20more%20information).%3C%2FP%3E%0A%3CP%3EBeginning%20the%20week%20of%20August%2031%3CSUP%3Est%3C%2FSUP%3E%2C%202020%2C%20Outlook%20for%20Android%20will%20be%20extending%20its%20support%20of%20mobile%20device%20mailbox%20policy%20settings%20to%20include%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fpowershell%2Fmodule%2Fexchange%2Fset-mobiledevicemailboxpolicy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EAllowBluetooth%3C%2FA%3E%20setting%20which%20will%20be%20used%20to%20disable%20wearable%20sync%20for%20those%20customers%20that%20do%20not%20have%20Microsoft%20Intune.%20While%20the%20setting%20in%20an%20Exchange%20ActiveSync%20world%20controls%20whether%20Bluetooth%20on%20the%20mobile%20device%20is%20enabled%20or%20disabled%2C%20Outlook%20is%20repurposing%20this%20control%20to%20manage%20the%20app%E2%80%99s%20wearable%20sync%20state%20because%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EThe%20setting%20is%20designed%20to%20manage%20a%20data%20synchronization%20protocol.%3C%2FLI%3E%0A%3CLI%3EOutlook%20can%20dictate%20how%20this%20setting%20is%20interpreted%20and%20used%20within%20its%20codebase.%3C%2FLI%3E%0A%3CLI%3EOutlook%20leverages%20Bluetooth%20for%20data%20synchronization%20between%20the%20mobile%20device%20app%20and%20the%20wearable%20app.%20However%2C%20even%20if%20Outlook%20extends%20wearable%20data%20synchronization%20to%20other%20protocols%20like%20Wifi%20or%20cellular%2C%20disabling%20this%20setting%20still%20ensures%20that%20app%E2%80%99s%20wearable%20sync%20state%20is%20disabled%20for%20the%20work%20or%20school%20account.%3C%2FLI%3E%0A%3CLI%3EThe%20default%20nature%20of%20this%20setting%20does%20not%20disrupt%20existing%20Exchange%20customers%20that%20are%20happily%20using%20wearable%20technology%20with%20Outlook%20for%20Android.%3C%2FLI%3E%0A%3CLI%3EThis%20setting%20provides%20non-Intune%20customers%20with%20a%20way%20to%20disable%20wearable%20synchronization.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3EWhen%20Outlook%20consumes%20the%20Exchange%20mobile%20device%20mailbox%20policy%2C%20Outlook%20will%20act%20on%20the%20AllowBluetooth%20setting%E2%80%99s%20value%20when%20an%20Intune%20App%20Protection%20Policy%20is%20not%20applied%20to%20the%20work%20or%20school%20account%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EWhen%20AllowBluetooth%20is%20enabled%20(default%20behavior)%20or%20configured%20for%20HandsfreeOnly%2C%20wearable%20synchronization%20between%20Outlook%20on%20the%20Android%20device%20and%20Outlook%20on%20the%20wearable%20is%20allowed%20for%20the%20work%20or%20school%20account.%3C%2FLI%3E%0A%3CLI%3EWhen%20AllowBluetooth%20is%20disabled%2C%20Outlook%20for%20Android%20will%20disable%20synchronization%20between%20Outlook%20on%20the%20Android%20device%20and%20Outlook%20on%20the%20wearable%20for%20the%20specified%20work%20or%20school%20account%20(and%20delete%20any%20data%20previously%20synced%20for%20the%20account).%20Disabling%20the%20synchronization%20is%20controlled%20entirely%20within%20Outlook%20itself%3B%20Bluetooth%20is%20not%20disabled%20on%20the%20device%20or%20wearable%20nor%20is%20any%20other%20wearable%20app%20affected.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CH2%20id%3D%22toc-hId--617178662%22%20id%3D%22toc-hId--617150666%22%3EHow%20does%20this%20impact%20my%20organization%3F%3C%2FH2%3E%0A%3CP%3EYour%20organization%20will%20likely%20fall%20into%20one%20of%20these%20categories%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EIf%20your%20organization%20is%20utilizing%20Intune%20App%20Protection%20Policies%2C%20there%20will%20be%20no%20change%20to%20the%20behavior%20of%20Outlook%20for%20Android%20and%20wearable%20device%20sync.%3C%2FLI%3E%0A%3CLI%3EIf%20your%20organization%20is%20not%20using%20Intune%20App%20Protection%20Policies%20and%20has%20configured%20an%20Exchange%20mobile%20device%20mailbox%20policy%20that%20has%20disabled%20AllowBluetooth%2C%20Outlook%20for%20Android%20users%20will%20lose%20access%20to%20Outlook%20data%20on%20wearable%20devices.%3C%2FLI%3E%0A%3CLI%3EIf%20your%20organization%20is%20not%20using%20Intune%20App%20Protection%20Policies%20and%20has%20configured%20an%20Exchange%20mobile%20device%20mailbox%20policy%20that%20has%20enabled%20AllowBluetooth%2C%20Outlook%20for%20Android%20users%20will%20continue%20to%20access%20Outlook%20data%20on%20wearable%20devices.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3EIf%20your%20organization%20would%20like%20to%20disable%20the%20synchronization%20of%20Outlook%20for%20Android%20data%20onto%20Android%20or%20Tizen%20wearables%2C%20you%20have%20two%20options%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EFor%20Intune%20customers%2C%20leverage%20Intune%20App%20Protection%20Policies%20to%20disable%20wearable%20sync.%20For%20more%20information%2C%20see%20%5B%23%24dp13%5D%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fexchange%2Fclients-and-mobile-in-exchange-online%2Foutlook-for-ios-and-android%2Foutlook-for-ios-and-android-configuration-with-microsoft-intune%23data-protection-scenarios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDeploying%20Outlook%20for%20iOS%20and%20Android%20app%20configuration%20settings%3C%2FA%3E.%3C%2FLI%3E%0A%3CLI%3EFor%20non-Intune%20customers%2C%20leverage%20Exchange%20mobile%20device%20mailbox%20policies%20and%20disable%20the%20AllowBluetooth%20setting%20to%20disable%20wearable%20sync.%20For%20more%20information%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2F%2520exchange%2Fclients-and-mobile-in-exchange-online%2Foutlook-for-ios-and-android%2Fmanage-outlook-for-ios-and-android%23using-mobile-device-access-and-mobile-device-mailbox-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EManaging%20Outlook%20for%20iOS%20and%20Android%3C%2FA%3E%20or%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2FExchange%2Fclients%2Foutlook-for-ios-and-android%2Fmanage-devices%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EManaging%20devices%20for%20Outlook%20for%20iOS%20and%20Android%20for%20Exchange%20Server%3C%2FA%3E.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CH2%20id%3D%22toc-hId-1870334171%22%20id%3D%22toc-hId-1870362167%22%3ESummary%3C%2FH2%3E%0A%3CP%3EGoing%20forward%2C%20Exchange%20customers%20will%20have%20two%20different%20options%20for%20managing%20the%20wearable%20sync%20state%20with%20Outlook%20for%20Android.%20Intune%20customers%20can%20adopt%20Intune%20App%20Protection%20Policies%20to%20disable%20the%20app%E2%80%99s%20wearable%20sync%20for%20the%20work%20or%20school%20account.%20Likewise%2C%20customers%20without%20Intune%20can%20leverage%20the%20AllowBluetooth%20Exchange%20mobile%20device%20mailbox%20policy%20setting%20to%20disable%20the%20app%E2%80%99s%20wearable%20sync%20for%20the%20work%20or%20school%20account.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22author%22%3ERoss%20Smith%20IV%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1553604%22%20slang%3D%22en-US%22%3E%3CP%3EOutlook%20for%20Android%20supports%20Android%20and%20Tizen%20wearable%20technology.%20When%20the%20Outlook%20app%20is%20installed%20on%20the%20wearable%2C%20the%20user%20can%20receive%20message%20notifications%20and%20event%20reminders%2C%20interact%20with%20messages%2C%20and%20view%20daily%20calendars.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1553604%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAnnouncements%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Emobility%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E

Outlook for Android supports Android and Tizen wearable technology. When the Outlook app is installed on the wearable, the user can receive message notifications and event reminders, interact with messages, and view daily calendars. For data to synchronize to the Outlook app installed on Android or Tizen wearable devices, the wearable must be connected to the Android device via Bluetooth.

By default, Outlook for Android supports a model where wearable sync is enabled.

For more information on what Outlook scenarios are specifically supported on Tizen wearables, see https://galaxystore.samsung.com/geardetail/com.microsoft.office.outlook.tizen.

Controlling wearables with Intune

For Exchange Online and on-premises customers leveraging hybrid modern authentication, Microsoft offers an in-market solution where Intune customers can leverage Intune App Protection Policies to disable wearable technology. This solution prevents any data from being synchronized to the wearable device from the work or school account when protected by an Intune App Protection Policy. For more information, see Deploying Outlook for iOS and Android app configuration settings.

Controlling wearables for non-Intune customers

Today, Outlook for Android does not provide a mechanism to control wearables for non-Intune customers.

Outlook for Android does support Exchange’s mobile device mailbox policy framework. Outlook for Android consumes the mobile device mailbox policy and acts based on what policy settings are configured. The mobile device mailbox policy is evaluated when Outlook for Android connects to Exchange Online. Today, Outlook for Android only supports the PIN and encryption client policy settings (see Managing Outlook for iOS and Android for more information).

Beginning the week of August 31st, 2020, Outlook for Android will be extending its support of mobile device mailbox policy settings to include the AllowBluetooth setting which will be used to disable wearable sync for those customers that do not have Microsoft Intune. While the setting in an Exchange ActiveSync world controls whether Bluetooth on the mobile device is enabled or disabled, Outlook is repurposing this control to manage the app’s wearable sync state because:

  1. The setting is designed to manage a data synchronization protocol.
  2. Outlook can dictate how this setting is interpreted and used within its codebase.
  3. Outlook leverages Bluetooth for data synchronization between the mobile device app and the wearable app. However, even if Outlook extends wearable data synchronization to other protocols like Wifi or cellular, disabling this setting still ensures that app’s wearable sync state is disabled for the work or school account.
  4. The default nature of this setting does not disrupt existing Exchange customers that are happily using wearable technology with Outlook for Android.
  5. This setting provides non-Intune customers with a way to disable wearable synchronization.

When Outlook consumes the Exchange mobile device mailbox policy, Outlook will act on the AllowBluetooth setting’s value when an Intune App Protection Policy is not applied to the work or school account:

  • When AllowBluetooth is enabled (default behavior) or configured for HandsfreeOnly, wearable synchronization between Outlook on the Android device and Outlook on the wearable is allowed for the work or school account.
  • When AllowBluetooth is disabled, Outlook for Android will disable synchronization between Outlook on the Android device and Outlook on the wearable for the specified work or school account (and delete any data previously synced for the account). Disabling the synchronization is controlled entirely within Outlook itself; Bluetooth is not disabled on the device or wearable nor is any other wearable app affected.

How does this impact my organization?

Your organization will likely fall into one of these categories:

  1. If your organization is utilizing Intune App Protection Policies, there will be no change to the behavior of Outlook for Android and wearable device sync.
  2. If your organization is not using Intune App Protection Policies and has configured an Exchange mobile device mailbox policy that has disabled AllowBluetooth, Outlook for Android users will lose access to Outlook data on wearable devices.
  3. If your organization is not using Intune App Protection Policies and has configured an Exchange mobile device mailbox policy that has enabled AllowBluetooth, Outlook for Android users will continue to access Outlook data on wearable devices.

If your organization would like to disable the synchronization of Outlook for Android data onto Android or Tizen wearables, you have two options:

  1. For Intune customers, leverage Intune App Protection Policies to disable wearable sync. For more information, see Deploying Outlook for iOS and Android app configuration settings.
  2. For non-Intune customers, leverage Exchange mobile device mailbox policies and disable the AllowBluetooth setting to disable wearable sync. For more information, see Managing Outlook for iOS and Android or Managing devices for Outlook for iOS and Android for Exchange Server.

Summary

Going forward, Exchange customers will have two different options for managing the wearable sync state with Outlook for Android. Intune customers can adopt Intune App Protection Policies to disable the app’s wearable sync for the work or school account. Likewise, customers without Intune can leverage the AllowBluetooth Exchange mobile device mailbox policy setting to disable the app’s wearable sync for the work or school account.

Ross Smith IV