How to set up App Protection Policies in Microsoft Intune

[@HarryLowtonIT]

I hope you enjoy this video on how to set up App Protection Policies in Microsoft Intune. Let me know in the comments other topics you want me to cover! //Timestamps: 00:00 Intro 02:22 Create an App Protection Policy 09:18 End User Experience for App Protection Policies 12:03 Outro

[@whitehack8375]

Best One, wish you deserve more subscription.

[@HarryLowtonIT]

@@whitehack8375 thank you!! Glad you enjoyed it. Hopefully my channel will continue to grow. Have a good new year.

[@mmiltenburg]

Nice to see someone explaining the basics clearly, without going into all kinds of technical stuff. Great job!

[@HarryLowtonIT]

Glad you liked it! Appreciate you watching and commenting.

[@radhakrishna6232]

Just watched 2nd video from intune library,app protection policy is awesome, trying to complete all videos today and tomorrow

[@HarryLowtonIT]

Amazing!! Enjoy - great to have you here and supporting the videos.

[@maxscootss]

Hey Harry, your videos are extremely helpful. Just wanted to let you know it is highly appreciated. I think you fill a nice niche in the O365 youtuber space. Great tutorials with minimal technical explanations just to get everyone onboard with the logic is great. Thanks again!

[@Subas_Bhandari]

I was confused and you made it clear. Thank you very much.

[@HarryLowtonIT]

Glad this video was able to help :)

[@NathanAtteberry]

I really did enjoy this. Thank you

[@lanre1900]

You're a brilliant tutor. Great stuff!

[@HarryLowtonIT]

😊 thank you 🙏🏻

[@Ihab.A]

Really razor-sharp information and clear explanations and walkthroughs

[@eswarshyam9024]

Hi Harry, A very nice video to learn intune with ease. Would it be possible to have some videos related to troubleshooting.

[@Fernando-ff6bu]

Hey Harry, love your delivery on videos, very concise yet comprehensive! I'm curious to know because I've been learning intune, for BYOD I've learned that MAM is the way to go. Is that just app protection policies together with conditional access policies, or is there something more to this? Also, for BYOD Laptops (not my choice), would this also be the same approach? Would auto enrollment of personal devices be discouraged, or would automatic windows enrollment in conjunction with app policies and some light configuration policies be recommended? Perhaps a lot of questions, but it will give me so much clarity!

[@yemtechit]

Thank Harry, for the amazing content. Please can you explain how you sign in to your iPhone to see the protected Apps? I created an App Protection Policy for Android users and I try using Intune Company Portal from my phone to log in, but I could not see any app. PLEASE KINDLY EXPLAIN THAT PART YOU LOGIN TO YOUR PHONE. THANKS

[@mrberty2020]

Easy to understand, great and clear content, thank you!

[@HarryLowtonIT]

Thank you, Robert. I'm glad this video was helpful. I also appreciate the feed about it being clear!

[@Alain3515]

Thanks for well-explained for App protection policies, I just do have a question about copy & paste from protected app such as Outlook email data paste to gmail, what if I'm going to forward the email to gmail account or use CC'd and BCC's. Are the policies still protecting the data leak? - Thank you!

[@SQLTalk]

Thank you Harry for the great video tutorial.

[@HarryLowtonIT]

Thanks Kirby - glad it could help!

[@mrberty2020]

Not sure if you already have covered these in other videos but would like to see you do some content regarding Endpoint Manager / Device config policies & endpoint security.

[@HarryLowtonIT]

Great question. I do not have a public video with this video topic, but I will put it on the list! Let me know if there is a specific policy or area of endpoint security you would like me to cover.

[@LiamGlanfield]

Thanks for the videos. Clear and helpful. I have a question and can't find the answer; Do you need apple business manager setup or can you use a personal iTunes account? The documents seem really unclear to me. I feel business manager is a better choice, but need it setup sooner than later, wondered if I can swap afterwards if a personal account is supported. Thanks

Fantastic explanations, I have learned a lot, thank you. One question regarding the security measures: for example you cannot copy text from your corporate apps to your private Gmail. Which is a great feature and makes sense. How about taking screenshots though? Screenshots will be then stored on your device. Is not that a security breach? What is your thought on this? Many thanks

[@yesmate0]

Great tutorial and great explantations, keep it up!

[@HarryLowtonIT]

Thanks for the kind words. I certainly will!

[@presleysscarystudio2903]

On ios devices BYOD, how do you keep from screenshots? Keeping from copy-paste works but the user is still able to screenshot. Is there a way to block it? On fully managed without removing the camera, does screenshot still work on managed apps?

[@BenFruitt]

would anyone happen to know how to edit the policy names after creating them? great videos !!

[@subhakarpalla5694]

Harry, The way you explained is really pretty. I have tried those policies in a test environment and it’s working perfect. But, in the same device if they use google chrome or any other browser to access the web outlook,then these policies are not working. They are able to copy data to all services. Please give me a solution for this. Also please tell us where can i access all of your in-tune videos from scratch to expert. Expecting reply from you.

[@Ian-mt4vq]

As I was watching the video just now, I thought this would be an issue!

[@bodiej]

Thank you good sir! excellent video

[@HarryLowtonIT]

You are welcome! Thanks for the feedback. I’m glad you enjoyed it. Let me know if there are any other topics you would like me to cover.

[@DotanKaufman]

Harry, Is the app protection policy user-based or devices base? What happens if a user has two devices? Will the policy only affect 1?

[@imamfahrurrozi5705]

Hi Harry, what is the least privilege role needed to configure policy in app protection?

[@chrismcclure4264]

Fantastic video. Microsoft could take a couple tips on how to make a good Azure demo video from you. Never stop.

[@HarryLowtonIT]

Thanks, Chris!! Appreciate the kind words. Out of interest, what part of my demoing stood out to you? I want to make sure I keep doing what works :)

[@chrismcclure4264]

@@HarryLowtonIT You slowly went into InTune and stepped through each screen of InTune . People just click through them very fast. You took your time and clearly explained each part. Then finally with the user experience to see what the it looks like in practice. So tired of people just talking about the benefits of each resource in azure for 10 minutes and a 90 second tutorial where assume everything is already configured perfectly.

[@chrismcclure4264]

Example of horrible demo: kzbin.info/www/bejne/bIanloOgatOYrdE

[@chrismcclure4264]

They didn't even put the blog link in the description. We work with Azure gov, so we spent hours on hours trying to find configuration info for our resources.

[@HarryLowtonIT]

@@chrismcclure4264 thanks, for taking the time to respond. It was beneficial. I will for sure keep the tutorials coming!

[@JasminaTV]

Thanks for the info... very useful!

[@HarryLowtonIT]

You bet! glad it helped.

[@patrick__007]

Is it true that for Android it is required to use the Company Portal in order to let this the Protection policy work? If i don't use the Company Portal the app in the apps are just working as usual without policies. Or do I need to configure a CA to only allow corporate apps via CP?

[@firatboyan-tr]

What if someone takes a screenshot of the corp. data through teams or outlook? Will this action also be blocked?

[@TheNinominator]

Hey man, this is the 10th video im watching for app protection policies and not a single one has talked about the unmanaged windows policies and specifically the custom apps section. Would be great if you could cover that in a video.

[@HarryLowtonIT]

You make a great point to keep this video short I left out the Windows side. I'm going to put that video idea on the list now :) Thanks for the feedback.

[@shineshine8171]

Is it possible to sync the O365 GAL to native contacts, when using App Protection Policies, on ios and android.? If not, how would we accomplish being able to sync the GAL to native contacts on ios and android? We also noticed that on Android it does not show the phone number for the contacts, inside the outlook app search. Any advice or recommendations are greatly appreciated.

[@HarryLowtonIT]

Hey - you can use the setting Sync policy managed app data with native apps - from intune app protection policy docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-iOS When deploying outlook you can enable save contact docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/outlook-for-ios-and-android-configuration-with-microsoft-intune docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/outlook-for-ios-and-android-configuration-with-microsoft-intune#configure-contact-field-sync-to-native-contacts-for-outlook-for-ios-and-android

[@akhilvarma8153]

Is it possible in Microsoft Intune to set up this policy that every time a user wants to download, copy, or delete something, the admin has to get the notification and grant the permission?

[@mra6454]

Question - How does this work if a phone has a screenshot feature? Does the policy also block that?

[@gdr1174]

I am struggling with allowing users the ability paste into third party Apps we approve. I thought that adding the app to the exclusion "select apps to exempt" would be the solution but that doesn't seem to work.. not sure if anyone else has experienced this?

[@xavierxon]

how to force user to sign in to the iOS edge browser mobile app by intune, before allowing them to access any sites

[@mohamaddanfarhan]

Cool, excellent

[@HarryLowtonIT]

Thank you! Cheers!

[@rosacheng3676]

Excellent!!!

[@HarryLowtonIT]

Thank you!

[@AbuNasser420]

Is that true that the company that i work in can see my chats in whatsapp and conversations and Safari history and details snapchat and my photos in my Iphone ?

[@emonmk9442]

Excellent

[@HarryLowtonIT]

Thanks Emon! Happy new year.

[@ehababumoailish6574]

I cant change target device from all to selected like unmanaged devices

[@naturevibezz]

I have been testing the device configuration policies in 3 physical devices. Among the 3 devices, only 1 device seems to be accepting all policies. Two of them is not accepting all the policies. As this is the case I think the issue is device specific. What could be the reason?

[@patrick__007]

Android or iOs?

[@akhilvarma8153]

Is it possible for an Intune administrator to prevent users from installing applications with a password, so that if a user wants to install an application or software, the administrator must approve or enter the password? Please provide the settings if they are present.

[@Hdic2018]

Will APP block screen capture?

[@xkorbekx]

what do you use to record your iphone screen?

[@HarryLowtonIT]

@@xkorbekx built in recorder in IOS

[@kimomuhminn]

explain to us : app configuration policy in Microsoft Intune

[@dancingkidkul9325]

Hello, Has anyone here used the Conditional access policy over App protection policy via Intune? If yes why and which one is recommended? Just wanted to understand pros and cons of both and which one would be recommended to keep data safe and secure on users personal mobile devices.

[@Marcell-q2b]

Hey, have you found an answer to this question yet?

[@ravishjayanna1508]

What is difference between app wrapping and app protection policy

[@HarryLowtonIT]

Hi Ravish, Happy new year. This is a good question, App wrapping lets you take a LOB application and make it aware of Intune app protection policies to protect your corporate data. So app protection policy is the controls to enforce security on data and app wrapping prepares and application to make use of these policies. I hope that helps! docs.microsoft.com/en-us/mem/intune/developer/apps-prepare-mobile-application-management

[@sahithsahadevan6658]

Hi harry ready to learn more about intune

[@HarryLowtonIT]

Hi - awesome, glad to have you here. Let me know if there are any topics you are interested in.

[@sahithsahadevan6658]

@@HarryLowtonIT sure... I'll let you know

[@HarryLowtonIT]

@@sahithsahadevan6658 Sound good! have a great week

[@user-lv8lt8gu4g]

6:58 bro doesn't understand the 720 minutes block access rule and goes ahead and skip it.