Application protection policies - block data leaving from company apps

%3CLINGO-SUB%20id%3D%22lingo-sub-2838465%22%20slang%3D%22en-US%22%3EApplication%20protection%20policies%20-%20block%20data%20leaving%20from%20company%20apps%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2838465%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20manager%20would%20like%20us%20to%20ensure%20that%20data%20do%20not%20leave%20company%2Fenterprise%20apps.%20Now%20our%20devices%20are%20going%20to%20be%20enrolled%20into%20Intune.%20Personal%20and%20company%20devices.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENot%20too%20long%20ago%20a%20colleague%20sent%20me%20his%20personal%20mobile%20number%20in%20Teams%20or%20outlook%20i%20think%20it%20was.%20I%20wanted%20to%20copy%20the%20number%20and%20create%20a%20contact%20in%20Outlook%20under%20my%20personal%20profile.%20I%20could%20not%20because%20of%20the%20application%20protection%20policy.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20time%20it%20is%20a%20link%20we%20can%20copy%20in%20a%20work%20email%20and%20wanting%20to%20paste%20into%20Safari%20on%20iOS%20or%20Chrome%20on%20Android%20and%20the%20same.%20cannot%20copy%20data%20from%20company%2Fenterprise%2Fmanaged%20apps.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20take%20it%20this%20is%20how%20it%20is%20meant%20to%20work%20and%20is%20just%20how%20things%20are%20%3F%3F%3F%20Or%20am%20I%20perhaps%20setting%20something%20way%20too%20strict%3F%20Obviously%20if%20i%20allow%20copy%20of%20data%20from%20Outlook%20or%20Teams%20that%20could%20just%20as%20well%20be%20sensitive%20data%20so%20i%20guess%20really%20the%20policy%20is%20working%20as%20it%20should%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2838465%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eapplication%20protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

Hi all,

 

My manager would like us to ensure that data do not leave company/enterprise apps. Now our devices are going to be enrolled into Intune. Personal and company devices.

 

Not too long ago a colleague sent me his personal mobile number in Teams or outlook i think it was. I wanted to copy the number and create a contact in Outlook under my personal profile. I could not because of the application protection policy.

 

Another time it is a link we can copy in a work email and wanting to paste into Safari on iOS or Chrome on Android and the same. cannot copy data from company/enterprise/managed apps.

 

I take it this is how it is meant to work and is just how things are ??? Or am I perhaps setting something way too strict? Obviously if i allow copy of data from Outlook or Teams that could just as well be sensitive data so i guess really the policy is working as it should?

1 Reply
Hi, good afternoon.

If you want to know my piece of the pie about app protection policies

Read this 2 blogs if you are interested
https://call4cloud.nl/2021/03/app-protection-attack-of-the-os-sharing/
And this one
https://call4cloud.nl/2021/03/the-chronicles-of-mam/

It all depends on the policy of the company... .But I would go for multiple app protection policies... I would restrict the personal app protections more then the managed one
Feel free to contact me if you have any questions