Outlook iOS/Android - Intune App Protecton policy (Block dictation)

%3CLINGO-SUB%20id%3D%22lingo-sub-1430525%22%20slang%3D%22en-US%22%3EOutlook%20iOS%2FAndroid%20-%20Intune%20App%20Protecton%20policy%20(Block%20dictation)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1430525%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20anyone%20know%20if%20it's%20possible%20to%20block%20dictation%20using%20app%20protection%20or%20is%20this%20a%20platform%20based%20with%20enrollment%20policy%20setting%20only%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1430525%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1430554%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20iOS%2FAndroid%20-%20Intune%20App%20Protecton%20policy%20(Block%20dictation)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1430554%22%20slang%3D%22en-US%22%3EThere%20is%20currently%20no%20way%20to%20block%20is%20through%20APP.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20am%20wondering%20what%20the%20reasoning%20behind%20this%20request%20is%3F%3CBR%20%2F%3EWhy%20would%20you%20want%20to%20block%20this%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1430704%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20iOS%2FAndroid%20-%20Intune%20App%20Protecton%20policy%20(Block%20dictation)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1430704%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F186539%22%20target%3D%22_blank%22%3E%40Thijs%20Lecomte%3C%2FA%3E%26nbsp%3B%20From%20a%20data%20protection%20and%20GDPR%20viewpoint.%26nbsp%3B%20Microsoft%20dicatation%20is%20ok%20as%20we%20know%20where%20our%20data%20is%20located%20and%20protected%20etc%20but%20not%20so%20ref%20Apple%20and%20Android.%26nbsp%3B%20It%20looks%20as%20though%20you%20can%20block%20this%20with%20an%20Intune%20policy%20if%20the%20mobile%20is%20enrolled%20but%20this%20seems%20to%20be%20a%20gap%20with%20BYOD%20and%20APP%20unless%20this%20could%20be%20acheived%20via%20work%20profile%20on%20the%20users%20device%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1430918%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20iOS%2FAndroid%20-%20Intune%20App%20Protecton%20policy%20(Block%20dictation)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1430918%22%20slang%3D%22en-US%22%3EThis%20is%20something%20that%20could%20be%20solved%20by%20Android%20Work%20Profiles%2FiOS%20User%20Enrollment.%3CBR%20%2F%3E%3CBR%20%2F%3EThey%20require%20enrollment%20of%20the%20device%20but%20provide%20more%20features%20for%20managing%20it.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1431095%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20iOS%2FAndroid%20-%20Intune%20App%20Protecton%20policy%20(Block%20dictation)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1431095%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F186539%22%20target%3D%22_blank%22%3E%40Thijs%20Lecomte%3C%2FA%3E%26nbsp%3B%20Thanks%20for%20the%20steer.%26nbsp%3B%20Would%20that%20allow%20us%20just%20to%20manage%20the%20work%20profile%20from%20a%20sandbox%20perspective%20and%20not%20the%20run%20the%20risk%20of%20a%20remote%20wipe%20for%20the%20full%20device%20i.e%20with%20the%20end%20users%20personal%20apps%2Fdata%20etc%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1431175%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20iOS%2FAndroid%20-%20Intune%20App%20Protecton%20policy%20(Block%20dictation)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1431175%22%20slang%3D%22en-US%22%3EYes%20this%20is%20entirely%20possible.%20These%20don't%20allow%20the%20full%20wipe%20of%20a%20device.%3CBR%20%2F%3E%3CBR%20%2F%3ECheck%20out%20the%20following%20documentation%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fandroid-work-profile-enroll%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fandroid-work-profile-enroll%3C%2FA%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.inthecloud247.com%2Fhow-to-start-with-android-enterprise-work-profiles-in-microsoft-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.inthecloud247.com%2Fhow-to-start-with-android-enterprise-work-profiles-in-microsoft-intune%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EI%20don't%20know%20on%20the%20top%20of%20my%20head%20if%20this%20supports%20disabling%20of%20dication%20though%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1450239%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20iOS%2FAndroid%20-%20Intune%20App%20Protecton%20policy%20(Block%20dictation)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1450239%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F186539%22%20target%3D%22_blank%22%3E%40Thijs%20Lecomte%3C%2FA%3E%26nbsp%3B%20Thanks%20for%20your%20help%20with%20this.%26nbsp%3B%20After%20playing%20it%20back%2C%20we've%20opted%20to%20use%20the%20terms%20of%20use%20conditional%20access%20policy%20and%20create%20a%20process%20re%20the%20use%20of%20native%20iOS%2FAndroid%20dictaiton%20for%20users%20to%20accept.%26nbsp%3B%20Found%20that%20to%20be%20easier%20than%20requiring%20people%20to%20enroll%20their%20personal%20devices%20to%20intune%20with%20the%20work%20profile%20partition%20with%20the%20potential%20for%20us%20becoming%20liable%20for%20anything%20that%20goes%20wrong%20with%20the%20devices.....%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20terms%20of%20Intune%20APP%20and%20the%20lack%20of%20control%20over%20dictation...do%20you%20know%20if%20there%20a%20user%20voice%20forum%20for%20Intune%20or%20a%20roadmap%20of%20features%20in%20the%20pipeline%3F%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Does anyone know if it's possible to block dictation using app protection or is this a platform based with enrollment policy setting only?

 

Thanks

7 Replies
Highlighted
There is currently no way to block is through APP.

I am wondering what the reasoning behind this request is?
Why would you want to block this?

@Thijs Lecomte  From a data protection and GDPR viewpoint.  Microsoft dicatation is ok as we know where our data is located and protected etc but not so ref Apple and Android.  It looks as though you can block this with an Intune policy if the mobile is enrolled but this seems to be a gap with BYOD and APP unless this could be acheived via work profile on the users device?

Highlighted
This is something that could be solved by Android Work Profiles/iOS User Enrollment.

They require enrollment of the device but provide more features for managing it.
Highlighted

@Thijs Lecomte  Thanks for the steer.  Would that allow us just to manage the work profile from a sandbox perspective and not the run the risk of a remote wipe for the full device i.e with the end users personal apps/data etc?

Highlighted
Yes this is entirely possible. These don't allow the full wipe of a device.

Check out the following documentation:
https://docs.microsoft.com/en-us/mem/intune/enrollment/android-work-profile-enroll
https://www.inthecloud247.com/how-to-start-with-android-enterprise-work-profiles-in-microsoft-intune...

I don't know on the top of my head if this supports disabling of dication though
Highlighted

@Thijs Lecomte  Thanks for your help with this.  After playing it back, we've opted to use the terms of use conditional access policy and create a process re the use of native iOS/Android dictaiton for users to accept.  Found that to be easier than requiring people to enroll their personal devices to intune with the work profile partition with the potential for us becoming liable for anything that goes wrong with the devices.....

 

In terms of Intune APP and the lack of control over dictation...do you know if there a user voice forum for Intune or a roadmap of features in the pipeline?  

 

Thanks

Highlighted
Glad you had it figured out :)
There isn't one, but you can always create one at : https://microsoftintune.uservoice.com/forums/291681-ideas