How to migrate smartphone users to the Outlook app with Intune

Moving to Outlook using Intune

As noted in the blog post, you’ll want to go to the Azure Portal and log in as an administrator. Click on “Add” and select “iOS” and then browse for the Outlook app. Review the information provided automatically by clicking on “App information”.

Susan Bradley

Next click on “Assignments” and “Add group”. Select “Required” at “Assignment type” to enforce the app on mobile devices.

Susan Bradley

Select “Included Groups” and choose which group you want to target or use both switch to deploy to all users or all devices. Once you configure the included assignment, click on “Ok” at the bottom. If you want to set a policy that users can’t copy business information from the Outlook app to a personal app, you can set up a policy to limit this.

Susan Bradley

To create an app protection policy, open your browser and navigate to this page on the Azure portal. Click on “Add a policy” and type a policy name. Select the iOS platform and click on “Select required apps”. Check all apps and click “Select” at the bottom. Click on “Configure required settings” and change these settings.

• Allow the app to transfer data to other apps: Policy managed apps
• Prevent “Save As”: Yes
• Select which storage services corporate data can be saved to—e.g., OneDrive for Business, Sharepoint
• Restrict cut, copy and paste with other apps: Policy managed apps with paste in

Click on “Ok” at the bottom once you’re finished. Click “Create” at the bottom to save the new policy.

Now that the policy is created, assign the policy to the same group you used to deploy the Outlook app. Click on your new policy and then click “Assignments”. Click on “Select groups” to include, choose the same group previously selected for Outlook app assignment, and click “Select”.

You can now use the Outlook app throughout your organization. The app supports modern authentication, and once you’ve weaned users off the native phone application, you can disable Basic Authentication without any side effects. Some users may prefer the focused view for the Outlook app, others would prefer that focused view is disabled and that conversations are not threaded. You can finally disable the main email application by going into settings, accounts and passwords and deleting the existing account.

The change does not impact SMTP authentication. However, you may want to review how you have SMTP authentication set up.

Change is coming to Office 365 and Microsoft’s mandate will help keep us all safer from credential harvesting attacks. Take the time now to migrate to safer and more secure applications.

Don’t forget to sign up for TechTalk from IDG, the new YouTube channel for tech news of the day.