Edit

Step 9: Create and assign an app protection policy

  • Article

In this article, you'll use Intune to create and assign an app protection policy to a client app on an end user's device. Intune uses app protection policies to confirm that your apps are meeting your organization's data protection requirements.

Note

Use the information provided in this series of topics to try and evaluate Microsoft Intune. When you're ready, follow the complete process to set up Intune. For more information, see Set up Microsoft Intune.

If you don't have an Intune subscription, sign up for a free trial account.

Prerequisites

Sign in to Intune

Sign in to the Intune as a Global administrator or an Intune Service administrator. If you've created an Intune Trial subscription, the account you created the subscription with is the Global administrator.

Create an app protection policy

Use the following steps to create an app protection policy:

  1. In Intune, select Apps > App protection policies > Create Policy > Windows 10.

  2. Enter the following details:

    • Name: Windows 10 content protection
    • Description: Users associated with this policy won't be able to cut, copy, or paste any content between the assigned app and other non-managed apps on the device.
    • Enrollment state: With enrollment

  3. Under Protected apps, select Add. The Add apps pane is displayed.

  4. Choose the apps that must adhere to this policy and select OK.

  5. Select Next to display the Required settings.

  6. Select Allow Overrides to set the Windows Information Protection mode. Selecting this option blocks enterprise data from leaving the protected app.

  7. Select Next to display the Advanced settings.

  8. Select Next to display the Assignments.

  9. Select Select groups to include, select the group, and select Select.

  10. Select Next to display the Review + create step.

  11. Select Create to create your policy.

You'll see the app protection policy in Intune.

Note

App protection policies can only be applied to groups that contains users, not groups that contain devices.

Next steps

In this article, you created and assigned an app protection policy. Users of the app that have this policy assigned won't be able to cut, copy, or paste any content between the assigned app and other non-managed apps on the device. This type of protection helps protect your organization's data. For more information about app protection policies in Intune, see What are app protection policies?

To continue to evaluate Microsoft Intune, go to the next step:

Step 10: Create and assign a custom role