

Enterprise enhanced data protection (Level 2) introduces APP data leakage prevention mechanisms and minimum OS requirements.This is an entry level configuration that provides similar data protection control in Exchange Online mailbox policies and introduces IT and the user population to APP. For Android devices, this level validates Android device attestation.


For some, it may not be obvious which policy settings are required to implement a complete scenario. The choices available in APP enable organizations to tailor the protection to their specific needs. Create Intune app protection policiesĪpp Protection Policies (APP) define which apps are allowed and the actions they can take with your organization's data. For more information, see App-based Conditional Access with Intune. For Android devices, the Intune Company Portal app is required. To leverage app-based conditional access policies, the Microsoft Authenticator app must be installed on iOS devices.
