Devices | Microsoft Zero Trust Workshop

Implementation Effort: Medium – IT and Security Operations teams need to define app protection policies, configure supported apps, and maintain ongoing policy updates and user support.

📄️ Review Unenrolled BYOD MAM in the Context of Intune App Protection Policies

Implementation Effort: Medium – IT and Security Operations teams must configure app protection policies, define app configuration profiles, and maintain ongoing support for BYOD users.

📄️ Review Corporate Enrolled Devices in the Context of Intune App Protection Policies

Implementation Effort: Low – IT and Security Operations teams only need to apply targeted app protection policies to already-enrolled corporate devices, with minimal configuration overhead.

📄️ Review Data Protection Framework

Implementation Effort: Medium – IT and Security Operations teams must assess organizational risk levels, map users to protection tiers, and configure appropriate App Protection Policies (APP) in Intune.

📄️ Backup to Android Backup Services

Implementation Effort: Low – IT administrators only need to configure a single setting within the Android App Protection Policy in Microsoft Intune.

📄️ Backup to iCloud

Implementation Effort: Low – IT administrators only need to configure a single setting within the iOS/iPadOS App Protection Policy in Microsoft Intune.

📄️ Send Org Data to Other Apps

Implementation Effort: Low – IT administrators only need to configure a single setting within the App Protection Policy in Microsoft Intune.

📄️ Transfer Telecommunication Data

Implementation Effort: Low – IT administrators only need to configure a single setting within the App Protection Policies in Microsoft Intune for Android and iOS/iPadOS.

📄️ Tunnel for MAM

Implementation Effort: Medium – IT and Security Operations teams must deploy the Microsoft Tunnel Gateway, configure VPN profiles, and ensure apps are integrated with the Intune App SDK and Microsoft Authentication Library (MSAL).

📄️ Allow User to Save Copies to Selected Services

Implementation Effort: Low – IT administrators only need to configure this setting within the App Protection Policies for Android and iOS/iPadOS in Microsoft Intune.

📄️ Cut, Copy, Paste in App Protection Policies

Implementation Effort: Low – IT administrators only need to configure this setting within the App Protection Policies in Microsoft Intune.

📄️ Screen Capture

Implementation Effort: Low – IT administrators only need to configure a setting within the App Protection Policy or device restriction policy, depending on the platform.

📄️ Approved Keyboards (Android Only)

Implementation Effort: Low – IT administrators only need to configure the approved keyboard list within the App Protection Policies for Android in Microsoft Intune.

📄️ 3rd Party Keyboards for iOS

Implementation Effort: Low

📄️ Encryption in App Protection Policies

Implementation Effort: Low – IT administrators only need to enable encryption settings within the App Protection Policies in Microsoft Intune.

📄️ App Data Sync with Native Apps or Add-ins

Implementation Effort: Low – IT administrators only need to configure a single setting within the App Protection Policies in Microsoft Intune for Android and iOS/iPadOS.

📄️ Restrict Web Content Transfer with Other Apps

Implementation Effort: Low – IT administrators only need to configure a single setting within the App Protection Policies for iOS/iPadOS and Android in Microsoft Intune.

📄️ Org Data Notifications

Implementation Effort: Low – IT administrators only need to configure this setting within the App Protection Policies in Microsoft Intune.

📄️ PIN or Biometric

Implementation Effort: Low

📄️ Time Out

Implementation Effort: Low

📄️ PIN Reset

Implementation Effort: Low

📄️ Work or School Account

Implementation Effort: Low

📄️ Recheck Access Requirement

Implementation Effort: Low

📄️ App Condition

Implementation Effort: Low

📄️ Jailbroken/Rooted Devices

Implementation Effort: Low

📄️ Require Threat Scan on Apps

Implementation Effort: Low

📄️ Require SafetyNet

Implementation Effort: Low

📄️ Mobile Threat Defense

Implementation Effort: Medium

📄️ Knox Attestation

Implementation Effort: Low

📄️ SafetyNet / Hardware Backed Key

Implementation Effort: Low

📄️ Screen Capture and Google Assistant

Implementation Effort: Low

📄️ App Protection and Conditional Access

Implementation Effort: Low

📄️ MDM 01: Intune MDM for iOS and Android: Corporate-Owned vs BYOD Deployment Strategies

Implementation Effort: Medium

📄️ MDM_02: Device Compliance Policy in Intune for iOS and Android MDM

Implementation Effort: Medium

📄️ MDM_03: Enrollment Restrictions for MDM for iOS and Android in Intune

Implementation Effort: Low

📄️ MDM_04: Mobile Threat Defense for iOS and Android MDM in Intune

Implementation Effort: Medium

📄️ Company Portal Customization

Implementation Effort: Low – This feature only requires targeted configuration actions in Microsoft Intune, such as uploading branding assets and setting preferences.

📄️ Terms and Conditions

Implementation Effort: Low — Requires configuration policies and document upload, but does not require ongoing user management once deployed.

📄️ Windows Hotpatch & VBS

Implementation Effort: Medium — Requires IT to configure policies via Intune or Group Policy and coordinate across identity, device, and security teams.

📄️ Office Add-ins

Overview

📄️ Intune Advanced Analytics

Implementation Effort: Medium

📄️ Passwordless and Windows Hello for Business (WHfB)

Implementation Effort: Medium — Requires IT to configure policies via Intune or Group Policy and coordinate across identity, device, and security teams.