Policies for Office apps

Intune provides policies specifically for Microsoft Office apps. You can select specific options to create mobile app management policies for Office mobile apps that connect to Microsoft 365 services. There are many policies for Office apps that you can add to Microsoft Intune and apply to groups of end users.

Examples of just a few of the Office app polices include the following:

  • Microsoft Word: Turn off Protected View for attachments opened from Outlook
  • Microsoft Visio: Block macros from running in Office files from the Internet
  • Microsoft Project: Allow Trusted Locations on the network
  • Microsoft Publisher: Publisher Automation Security Level
  • Microsoft PowerPoint: Turn off Protected View for attachments opened from Outlook


When you select to configure each specific app policy, additional policy details are provided. You can filter the Office policy list to quickly select the recommended Security Baseline policies.

You can also protect access to Exchange on-premises mailboxes by creating Intune app protection policies for Outlook for iOS/iPadOS and Android enabled with hybrid Modern Authentication. Before using this feature, you must meet the requirements for using the Office cloud policy service. App protection policies are not supported for other apps that connect to on-premises Exchange or SharePoint services. For related information, see Overview of the Office cloud policy service for Microsoft 365 Apps for enterprise.


You must meet the requirements to use policies for Office apps. For more information, see Requirements for using the Office cloud policy service.

To add an Office app policy

After you set up Intune for your organization, you can create an Office app policy.

  1. Sign in to the Microsoft Endpoint Manager admin center.

  2. Select Apps > Policies for Office apps > Create.

  3. Add the following values:

    • Name: Type a name (required) for your new policy.
    • Description: (Optional) Type a description.
    • Select type: Select how this policy configuration will be applied.
    • Select group: Select the group for this policy configuration.
    • Configure policies: Select the Office policy that you want to apply. You can sort the provided list based on policy, platform, application, recommendation, and status.
  4. Select Create. The policy is created and appears in the table on the Policy configurations pane.


    The Policy configurations pane provides the Health status for each policy.

Additional information

Next steps