Assign your policy to the Group you created in Step 1.Define your conditional launch settings:.Select your app access requirements (such as a PIN for the apps, how often to re-enter the PIN, allow biometric instead of a PIN, etc.):.(the “i” tool-tip can help explain the options, or refer to our docs, link above) Select your data protection settings for cut/copy/paste and data encryption, etc.From the Intune Portal, create an “App Protection Policy” (APP) - aka “Mobile App Management” or MAM Policy - with a Name and Description….Intune is included in the “E3” suites – M365 E3 or EMS E3.
Office 365 mobile license#
Solution: Apply controls to Office Mobile Apps on mobile devices
To that thought, I’m offering a “lighter hand” here - apply Intune MAM policy to Office Mobile Apps if/when they are used to access O365 content - but don't block existing native app access, nor require device enrollment into Intune (think: personal device or existing 3rd party MDM). With any rapid-deploy change, there is heightened worry around the IT version of the Hippocratic Oath - ‘ First, do no harm.’ This could be “ Don’t blow up my end-user’s experience (nor my Helpdesk)” or, it could be, “ Don’t drop my security posture to the floor.” In this post, I’ll offer a ‘cut to the chase’ option for Intune that can help enable remote workers on BYO/unmanaged or 3 rd party MDM-managed mobile devices with a minimum of impact to your current-state.
Office 365 mobile pro#
Top 5 Ways Azure AD Helps Enable Remote WorkĪs a former IT Pro (and still one at heart), I know that during times of trouble, there is real value in having crisp, concise ‘just tell me what to do’ guidance.The Top 9 Ways Microsoft IT is Enabling Remote Work for its Employees.As most of us have seen, working remotely has taken on new scale and urgency right now and people across Microsoft have published some great reminders/guidance to help: As you all know, well-managed and secure remote access is a key aspect of Microsoft solutions.