หมายเหตุ
การเข้าถึงหน้านี้ต้องได้รับการอนุญาต คุณสามารถลอง ลงชื่อเข้าใช้หรือเปลี่ยนไดเรกทอรีได้
การเข้าถึงหน้านี้ต้องได้รับการอนุญาต คุณสามารถลองเปลี่ยนไดเรกทอรีได้
In this article, you learn how to create and assign an app protection policy in Microsoft Intune to protect apps on user devices. App protection policies help ensure your apps meet your organization's data protection requirements, keeping corporate data secure.
This article is part of an Evaluate and Try series that helps you evaluate Microsoft Intune's capabilities.
Prerequisites
Licensing requirements
- A Microsoft Intune subscription. Sign up for a free trial account.
Roles requirements
Sign in to the Microsoft Intune admin center with the following role:
- Built-in Application Manager Microsoft Intune role
Device configuration requirements
To complete this step, you must:
Create an app protection policy
Use the following steps to create an app protection policy:
Sign in to the Microsoft Intune admin center and select Apps > Protection > Create > Windows 10.
Enter the following details:
- Name: Windows content protection
- Description: Users associated with this policy can't cut, copy, or paste any content between the assigned app and other nonmanaged apps on the device.
- Enrollment state: With enrollment
Under Protected apps, select Add. The Add apps pane is displayed.
Choose the apps that must adhere to this policy and select OK.
Select Next to display the Required settings.
Select Allow Overrides to set the Windows Information Protection mode. Selecting this option blocks enterprise data from leaving the protected app.
Select Next to display the Advanced settings.
Select Next to display the Assignments.
Select Select groups to include, select the users group, and select Select.
You can only apply app protection policies to groups that contain users, not groups that contain devices.
Select Next to display the Review + create step.
Select Create to create your policy.
You see the app protection policy in Intune.
Next steps
In this article, you created and assigned an app protection policy. Users of the app that have this policy assigned can't cut, copy, or paste any content between the assigned app and other unmanaged apps on the device. This type of protection helps protect your organization's data. For more information about app protection policies in Intune, see What are app protection policies?
To continue evaluating Microsoft Intune, go to the next step: