iOS enrollment with Intune

Hi K-Mohammed, thank you very much for your reply. I have an additional question: in that case, we will definitely have to block the entire app, right? Since we're not separating things, I see that in the iOS test, if I try to save Outlook files, and I have both my personal and work email in that app, it blocks both my personal and work email. In that case, it doesn't just protect company stuff, but the entire managed apps, is that right?

Hi Daniel Herrera - ExperTech,

App Protection Policies protect data at the app level and are enforced inside the managed app. For multi-identity apps like Outlook, Intune applies these protections only to the work side. This means when you’re in your work account, actions like saving files, sharing data, or copying content are restricted based on company rules. These do not affect your personal account. I've tested this behavior and it's working as I've described.

If you'd like to block users from adding personal accounts to Outlook, you can do this using an app configuration policy. For more info, refer: https://free.blessedness.top/intune/intune-service/apps/app-configuration-policies-outlook#use-app-configuration

For a simple visual of how work and personal data are kept separate with Intune, check out this illustration: https://free.blessedness.top/en-us/intune/intune-service/apps/app-protection-policy#how-app-protection-policies-protect-app-data

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

Hello K-Mohammed, how are you? Could you tell me what method and configuration you used, since I did the process through the web but it blocks the entire app? If I have my personal and corporate accounts, it blocks both. I escalated the case to Microsoft, and they told me that this is supposedly the expected behavior since it blocks the entire app.

English translation of image block:

-Block the display of corporate documents in unmanaged applications

-Allow copy and paste operations to be affected by managed open access

English translation of the email from Microsoft: Dear Daniel,

Thank you for contacting Microsoft Customer Support!

I would like to invite you to give us your opinion about the service you received on this occasion. Please click on the following Microsoft link:

https://admin.microsoft.com/adminportal/home#/support/feedback/2509250040009764

Your opinion is valuable to us!

Thank you for your time and cooperation. I will now proceed to file this service request #}. If any additional issues arise related to this case, you can request that it be reopened.

Below is a summary of the incident:  

Symptom:

The iOS device enrolled as personal also has restrictions applied in the personal environment, specifically within applications such as Outlook.

Cause:

Limitations due to the design of the iOS operating system. Unlike Android, iOS does not allow for a clear separation or partition between the personal and corporate environments. Administration policies are applied uniformly in certain applications, affecting functions such as screen capture or data access.

Solution:

Inform the user that this behavior is expected on enrolled personal iOS devices and that the restrictions applied are part of the product design. There is no technical solution to completely separate environments in iOS under the personal enrollment model.