What settings can Microsoft Intune control?

Q: (from Joe)

For employees that are accessing email via a mobile device, do we have the ability to block their ability to download attachments?

A:

In order to control what organizational assets are stored on the local device, you need control of the local device. That is done with Microsoft Intune. I did a Bing search on “Intune control of IOS”. Looking through the settings that Intune can manage on a mobile OS like IOS (/en-us/intune/device-restrictions-ios) I didn’t see anything that looked promising. A little further down in the list was Configure email settings for IOS (/en-us/intune/email-settings-ios). Nothing there either.

The only technique that I can think of that would allow the user access to the message and attachment but keep them from storing the attachment locally would be to have the sender encrypt the message. But that isn’t a practical solution for the public at large.

Anyone else have an idea?

UPDATE: From my co-worker Nick Johnson, here are the specific settings to control application save behavior for IOS: https://docs.microsoft.com/en-us/intune/app-protection-policy-settings-ios. It’s nice to have smart co-workers – Thanks Nick!

  Steve