Thanks for the informative video, Nick. What if the user does not have the broker app installed on an unmanaged device? My understanding is that for the app protection policies to work on unmanaged devices, the devices need a broker app. Is there a way to enforce or automatically re-direct users to the store so that they install the broker app for the respective platform they are on, or is this done via user education and they have to explicitly go in the store and install the broker app. My concern comes from a situation where in even after user education they do not install the broker app and try to access corporate data. I think, the only way to stop them to do so is using a CA policy which states "Require App Protection Policy", but does that redirect them to store to install the broker app for a seamless user-experience?
@@cyphernz thanks for the reply! Does that redirect them to store to install the broker app or do they have to explicitly go into the store to download and install the broker app?
Yes, didnt show that in this video but you would use the conditional access policy to redirect them to the store to download the app docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-protection-based-conditional-access
Hi Nick. Amazing Video. I'm having a issue using app protection policy on iOS devices and Microsoft support say that it's not possible to use app protection policy, which is very strange for me. As soon as i activate the app protection policy for Microsoft Edge for example, the account settings on iPhone start to ask for the microsoft credentials and when i try fill it, always gave an error because Apple Internet Accounts can't be used with App protection policy and with this, contacts, calendars and notes native apps don't work. Do you have any idea of how i can fix this issue ? Spent hours we microsoft support but i can't believe this is not possible.
Хобби
So informative! Thanks so much
Nice video!!! One doubt, do I need to enroll the device with company portal and then install the apps so I can manage them?
Thanks for the informative video, Nick. What if the user does not have the broker app installed on an unmanaged device? My understanding is that for the app protection policies to work on unmanaged devices, the devices need a broker app. Is there a way to enforce or automatically re-direct users to the store so that they install the broker app for the respective platform they are on, or is this done via user education and they have to explicitly go in the store and install the broker app. My concern comes from a situation where in even after user education they do not install the broker app and try to access corporate data. I think, the only way to stop them to do so is using a CA policy which states "Require App Protection Policy", but does that redirect them to store to install the broker app for a seamless user-experience?
Yeah a CA policy to require app protection usually goes hand amd hand when setting App Protection policies but that isnt shown in this vid
@@cyphernz thanks for the reply! Does that redirect them to store to install the broker app or do they have to explicitly go into the store to download and install the broker app?
Yes, didnt show that in this video but you would use the conditional access policy to redirect them to the store to download the app docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-protection-based-conditional-access
@@t-minus365 thanks Nick!
Hi Nick. Amazing Video. I'm having a issue using app protection policy on iOS devices and Microsoft support say that it's not possible to use app protection policy, which is very strange for me. As soon as i activate the app protection policy for Microsoft Edge for example, the account settings on iPhone start to ask for the microsoft credentials and when i try fill it, always gave an error because Apple Internet Accounts can't be used with App protection policy and with this, contacts, calendars and notes native apps don't work. Do you have any idea of how i can fix this issue ? Spent hours we microsoft support but i can't believe this is not possible.
Is the broker app required for unmanaged devices, too?
It is not required.
What happens if I take a screenshot of a text message?