Quickstart: Create and assign an app protection policy

In this quickstart, you will use Intune to create and assign an app protection policy to a client app on an end user's device. Intune uses app protection policies to confirm that your apps are meeting your organization's data protection requirements.

If you don't have an Intune subscription, sign up for a free trial account.

Prerequisites

Sign in to Intune

Sign in to the Intune as a Global administrator or an Intune Service administrator. If you have created an Intune Trial subscription, the account you created the subscription with is the Global administrator.

Create an app protection policy

Use the following steps to create an app protection policy:

  1. In Intune, select Apps > App protection policies > Create Policy > Windows 10.

  2. Enter the following details:

    • Name: Windows 10 content protection
    • Description: Users associated with this policy will not be able to cut, copy, or paste any content between the assigned app and other non-managed apps on the device.
    • Enrollment state: With enrollment
  3. Under Protected apps, click Add. The Add apps pane is displayed.

  4. Choose the apps that must adhere to this policy and click OK.

  5. Click Next to display the Required settings.

  6. Click Allow Overrides to set the Windows Information Protection mode. Selecting this option will block enterprise data from leaving the protected app.

  7. Click Next to display the Advanced settings.

  8. Click Next to display the Assignments.

  9. Click Select groups to include, click the group, and click Select.

  10. Click Next to display the Review + create step.

  11. Click Create to create your policy.

You'll now see the app protection policy in Intune.

Note

App protection policies can only be applied to groups that contains users, not groups that contain devices.

Next steps

In this quickstart, you created and assigned an app protection policy. Users of the app that have this policy assigned will not be able to cut, copy, or paste any content between the assigned app and other non-managed apps on the device. This type of protection will help protect your organization's data. For more information about app protection policies in Intune, see What are app protection policies?

To follow this series of Intune quickstarts, continue to the next quickstart.