
If the setting is Off, the user will be unable to copy information from a work account into a personal app or personal account.Once the app’s “moved,” go to the App info screen again, and under “Storage” you’ll be able to see how much of its total size it’s keeping in the External storage. We do allow this by default, but if the setting is On, the user could copy information in a work file to a personal file. These devices are blocked when this setting is On.ĭon't allow users to copy content from Office apps into personal apps This means that the user can modify the operating system, which can make the device more subject to malware. This setting determines how long a user can be idle before they're prompted to sign in again.ĭeny access to work files on jailbroken or rooted devicesĬlever users may have a device that is jailbroken or rooted. Require users to sign in again after Office apps have been idle for To prevent an unauthorized user from randomly guessing a PIN, the PIN will reset after the number of wrong entries that you specify. Reset PIN when login fails this many times

If this setting is On users must provide another form of authentication, in addition to their username and password, before they can use Office apps on their mobile devices. Require a PIN or fingerprint to access Office apps The following settings are available to manage how users access Office work files: Setting Settings that control how users access Office files on mobile devices Even if the device is lost or stolen, no one can read your company data. Keep this setting On so that work files are protected by encryption. If this setting is On, the only available save location for work files is OneDrive for Business. If a device isn't used for the number of days that you specify here, any work files stored on the device will be deleted automatically. The following settings are available to protect work files if a user's device is lost or stolen: Settingĭelete work files from an inactive device after this many days The following tables give detailed information about settings available to protect work files on devices and the settings that control how users access Office files from their mobile devices.įor more information, see How do protection features in Microsoft 365 Business Premium map to Intune settings. On the Delete policy pane, choose Confirm to delete the policy or policies you chose. On the Policies page, choose a policy and then Delete. When you're finished, close the Edit policy pane. When you change a value, it's automatically saved in the policy. On the Edit policy pane, choose the policy you want to change.Ĭhoose Edit next to each setting to change the values in the policy. On the Policies card, choose Edit policy. Next decide Who will get these settings? If you don't want to use the default All Users security group, choose Change, choose the security groups that get these settings > Select.įinally, choose Done to save the policy, and assign it to devices. You can always use the Restore default settings link to return to the default setting. For more information, see Available settings. Manage how users access Office files on mobile devices is Off by default, but we recommend that you turn it On and accept the default values. Configure the settings how you would like.
#HOW TO CHANGE APP SETTINGS ANDROID FOR ANDROID#
Under Policy type, choose Application Management for Android or Application Management for iOS, depending on which set of policies you want to create.Įxpand Protect work files when devices are lost or stolen and Manage how users access Office files on mobile devices. On the Add policy pane, enter a unique name for this policy. In the left nav, choose Devices > Policies > Add. On the admin center home page, confirm that your new policy was added by choosing Policies and reviewing your policy on the Policies page. To finish creating the policy, choose Add.


Under Who will get these settings?, all users are selected by default, but you can choose Change to select any security groups you've created. Under Files in these apps will be protected, select the Office apps you want to protect on mobile devices. Turn on Manage how users access Office files on Mobile devices and ensure the settings are turned on or set for each item. Turn on Protect work files when devices are lost or stolen, and then make sure the following three settings are turned on:įorce users to save all work files to OneDrive for Business In the Add policy pane, enter a name under Policy name, and choose the policy type that you want under Policy type. Sign in to the Microsoft 365 admin center. You can set up a user access policy that requires mobile users to enter a PIN or fingerprint to sign in, and also encrypts work files stored on their devices.
