When set to Not configured (default), Intune doesn't change or update this setting. It also prevents the content from being shown on display devices that don't have a secure video output. Screen capture (work profile-level): Block prevents screenshots or screen captures on the device. General Fully managed, dedicated, and corporate-owned work profile devices For fully managed and dedicated devices, these settings apply device-wide. These settings have (work profile-level) in the setting name.
Each setting is under a heading that indicates the enrollment types that can use the setting.įor corporate-owned devices with a work profile, some settings only apply in the work profile. To see which settings are supported by which enrollment types, see the user interface. Some settings are not supported by all enrollment types. These settings apply to Android Enterprise enrollment types where Intune controls the entire device, such as Android Enterprise fully managed, dedicated, and corporate-owned work profile devices. Fully managed, dedicated, and corporate-owned work profile When ready to proceed, create an Android device administrator device restrictions configuration profile.
To better understand how to implement specific security configuration scenarios, see the security configuration framework guidance for Android Enterprise device restriction policies. When configuring device restriction policies, the broad range of settings enable you to tailor protection to your specific needs. Android Enterprise corporate owned dedicated devices (COSU)įor Android device administrator, see Android and Samsung Knox Standard device restrictions.Android Enterprise corporate owned fully managed (COBO).Android Enterprise corporate-owned work profile (COPE).Android Enterprise personally owned devices with a work profile (BYOD).As part of your mobile device management (MDM) solution, use these settings to allow or disable features, run apps on dedicated devices, control security, and more. This article describes the different settings you can control on Android Enterprise devices.