Application protection policy is not working (Restrict copy/past actions)‎

Lazher YAAKOUBI 191 Reputation points
2022-06-20T18:15:51.7+00:00

Hello,

I have an APP policy to restrict cut, copy and paste between other applications with Policy managed apps option, I have Edge and Outlook deployed via Intune.

This problem occurs when the user needs to copy data from a personal account configured in the managed application to an unmanaged application(like note IOS), and the user gets a popup stating that copy/paste is blocked.

Looking at this article, Edge and Outlook support multi-identity: https://learn.microsoft.com/en-us/mem/intune/fundamentals/end-user-mam-apps-ios#use-apps-with-multi-identity-support

but does not work with the personal account in managed applications.

Thanks.

Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
980 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Lu Dai-MSFT 28,446 Reputation points
    2022-06-21T04:06:49.55+00:00

    @Anonymous Thanks for posting in our Q&A. Yes, app protection policies are applied only in a work context.

    To clarify this issue, we appreciate your help to collect some information:

    1. Please try to sign out the personal account and sign in again, then check if this issue still exists.
    2. Please check if there is any app protection policy about this note app. If yes, please check if the setting "Receive data from other apps" is set to "None". It will make note app blocks data transfer from any app.
    3. Please show the screen shots about app protection status under Troubleshooting + support > Troubleshoot > select the user that you deployed app protection policy to.

    If there is anything update, feel free to let us know.


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  2. Lu Dai-MSFT 28,446 Reputation points
    2022-06-23T07:24:52.52+00:00

    @Anonymous Thanks for your update.

    I have done the test again and configured the same settings as yours. It still can copy data from Outlook's Personal account to unmanaged apps.
    214087-image.png

    It is suggested to try to create an app configuration policy for Outlook app in Apps > App configuration policies > managed devices. Here is my configuration:

    214088-image.png

    214138-image.png

    Please enter “about:intunehelp” in Edge's address bar on the iOS device and check if the app protection policy's settings iOS device get are same as you set in intune portal. Please refer to the following article:
    https://github.com/MicrosoftDocs/IntuneDocs/blob/main/intune/apps/app-protection-policy-settings-log.md

    Then please re-install Outlook and sign-in again to check if this issue still exists.

    If there is anything update, feel free to let us know.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.