App Protection Policy is not working as expected (Intune).

Omkar Pasalkar 71 Reputation points
2020-10-30T10:50:37.72+00:00

Hello

I have created A WIP policy which “Block” the copy-paste from managed app to unmanaged apps but users are facing issue while working so we decide to change the policy to “Allow Override” from “Block” we made changes in policy and ask all user to sync their a machine to apply changes on the device. After 24 hours we checked the data we found

Some users are able to copy-paste from managed apps to unmanaged but they prompt a pop-up while copy-paste.
Some user is still not able to copy-paste data. we re-sync machine, rejoin to domain still issue persists.
What am I missing any suggestion?

Thank You.

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,248 questions
0 comments No comments
{count} votes

Accepted answer
  1. Eswar Koneti 2,196 Reputation points
    2020-10-30T15:49:48.49+00:00

    looks like the policy yet to sync or issues with the syncing. you need to check the event viewer and registry.
    check the location for the WIP policies HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\DataProtection

    Regards,
    Eswar
    www.eskonr.com
    If the response is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Crystal-MSFT 42,961 Reputation points Microsoft Vendor
    2020-11-02T01:59:06+00:00

    @Omkar Pasalkar , For our issue, we can firstly go to one affected device. Settings->Accounts->Access work or school, find the account, chose info and click sync to sync the policy. wait the policy synced.

    Afterwards, we can go to the registry to check the value of EDPenforcementlevel under "HKLM\SOFTWARE\Microsoft\EnterpriseDataProtection\Policies". If it is is 2. it means Allowoverrride.

    36687-image.png
    36608-image.png
    Hope it can help.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  2. Elmar Muhumayev 0 Reputation points
    2024-01-12T20:02:39.29+00:00

    HI can you help me with something?

    Folders, programs, pictures, in short
      data on the flash card :(F) How can I prevent copying, copying, copying?
    no need to enter a password, just view the data on the flash card so that other people cannot copy or transfer it. I'm worried about it.
    How can I solve this? I've been looking for months. I can't find it. Please help me ))
    
    0 comments No comments