Doesnt work Restrcit copy and paste on COPE devices in Intune

Dilan Nanayakkara 1,111 Reputation points
2021-03-27T18:37:59.467+00:00

Hi All,

I have enroll the one of test device as a Android Enterprise corporate-owned devices with work profile (COPE) and publish few manage apps. Then I have create a App protection policy with restrict copy&paste and assign it to the user group but it seems doesn't work so far.

I just want to restrict the copy&paste between applications.

appreciate the help on this.

Thanks,
Dilan

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,682 questions
Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
862 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,212 questions
0 comments No comments
{count} votes

4 answers

Sort by: Most helpful
  1. Eswar Koneti 2,191 Reputation points
    2021-03-27T18:46:54.86+00:00

    Have you added the managed apps that are intune SDK supported?
    Did you check the reporting for MAM protection policy if they are successfully applied to the user or not?
    How is your MAM protection policy setting for restrict copy paste setting?

    Thanks,
    Eswar


  2. Dilan Nanayakkara 1,111 Reputation points
    2021-03-28T03:33:32.437+00:00

    Hi All,

    [Update]

    ++ @Eswar Koneti

    I have installed the outlook from personal Google play store for personal work space of Android device and it seems working fine. However if I deploy a Google managed Outlook via Intune to work profile it seems doesn't work so far. may be App protection policies will only be applied on personal work space.

    So I was wondering is this the limitation of COPE (Android Enterprise corporate-owned devices with work profile) or is there any way that I can restrict share the data/copy&past from work profile applications which is reside in work profile space.

    Thanks!
    Dilan

    0 comments No comments

  3. Lu Dai-MSFT 28,326 Reputation points
    2021-03-29T09:04:15.983+00:00

    @Dilan Nanayakkara Thanks for posting in our Q&A.

    App protection policy is supported for COPE devices. It seems that the app protection policy failed to be deployed to the COPE devices.

    For this issue, could you please refer to the following article to validate the app protection policy?
    https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policies-validate

    If there is anything update, feel free to let us know.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  4. Lu Dai-MSFT 28,326 Reputation points
    2021-03-30T08:39:15.887+00:00

    @Dilan Nanayakkara Thanks for your response.

    For this issue, I have done the test in my lab. I deploy the app protection about the work profile app in the COPE device to my user group. The policy is deployed successfully and I can't copy and paste to unmanaged apps.

    Given this situation, it is suggested to collect logs in the Android device.
    https://learn.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge#use-edge-for-ios-and-android-to-access-managed-app-logs

    With Q&A limitation, Q&A is not the best channel for such log analysis case. So we suggest to open a case to check on this. The following link describes how to open a case, we can refer to it:
    https://learn.microsoft.com/en-us/mem/intune/fundamentals/get-support

    Hope this issue will be solved as soon as possible.


    If the response is helpful, please click "Accept Answer" and upvote it.