App configuration policies on iOS managed devices Flashcards
(28 cards)
What is the minimum iOS/iPadOS version required for app configuration policy?
iOS/iPadOS 8.0 and later
This policy is specifically for managed devices.
What types of app installation are supported by the app configuration policy?
- Managed iOS/iPadOS app from the app store
- App package for iOS
These installation types are specific to managed devices.
What are the 8 high level steps to create an app configuration policy on iOS managed devices ?
- Apps > Configuration > Create > Managed devices
- Basics : Name + Description + Device enrollment type (set to Managed devices)
- Platform : iOS/iPadOS
- Click Select app next to Targeted app: choose the managed app to associate with the configuration policy
- Settings: In the dropdown box, select the Configuration settings format. 2 methods: Use configuration designer OR Enter XML data
- Scope tags
-
Assignments: select either Add groups, Add all users, or Add all devices
Once you’ve selected an assignment group, you can select a filter to refine the assignment scope when deploying app configuration policies for managed devices (Include/exclude) - Review+create
What does Microsoft Intune provide for apps?
Configuration settings that are unique to an app
What tool can be used for configuring apps in Microsoft Intune?
Configuration designer
Can the configuration designer be used for devices not enrolled in Microsoft Intune?
Yes
What does the configuration designer allow you to configure?
Specific configuration keys and values that help create the underlying XML
What must be specified for each key and value configuration?
- Configuration key
- Value type
- Configuration value
What are the possible value types for configuration values in Microsoft Intune?
- Integer
- Real
- String
- Boolean
What is the configuration key in Microsoft Intune?
The case sensitive key that uniquely identifies the specific setting configuration
What is the configuration value in Microsoft Intune?
The value for the configuration
Fill in the blank: The configuration settings are supplied to apps automatically when the apps are _______.
installed
What can a Microsoft Intune administrator control regarding accounts on managed devices?
Control which work or school accounts are added to Microsoft apps on managed devices.
What can be limited by the Intune administrator in Microsoft apps on enrolled devices?
Access to only allowed organization user accounts and block personal accounts.
What is the purpose of the IntuneMAMAllowedAccountsOnly key?
To specify which accounts are allowed in the apps on iOS/iPadOS devices.
What does it mean if IntuneMAMAllowedAccountsOnly is set to ‘Enabled’?
The only account allowed is the managed user account defined by the IntuneMAMUPN key.
What happens if IntuneMAMAllowedAccountsOnly is set to ‘Disabled’?
Any account is allowed.
What does the IntuneMAMUPN key represent?
UPN of the account allowed to sign into the app.
What does the IntuneMAMOID key represent?
User Object ID of the account allowed to sign into the app.
Fill in the blank: The key used to control account access in Microsoft apps is _______.
IntuneMAMAllowedAccountsOnly
True or False: Personal accounts can always access Microsoft apps on managed devices.
False
What requirement can organizations impose on enrolled devices regarding Microsoft apps?
Organizations can require that the work or school account is signed into managed Microsoft apps to receive Org data from other managed apps.
What is the purpose of the IntuneMAMRequireAccounts key?
It determines whether the app requires the user to sign-in to the managed user account to receive Org data.
What does it mean if IntuneMAMRequireAccounts is set to Enabled?
The app requires the user to sign-in to the managed user account defined by the IntuneMAMUPN key.
