Listen to this Post
Beginning in January 2025, Microsoft will introduce enhanced Mobile Application Management (MAM) controls for iOS/iPadOS devices. This update will prevent users from capturing or sharing screens within MAM-protected apps when using a managed account. Instead of the actual screen image, a blank screen will be captured. This feature is automatically enabled if the MAM policy “Send Org data to other apps” is set to “None” or any of the “Policy managed apps…” values. This addresses previous gaps in BYOD (Bring Your Own Device) environments where full device enrollment was required to enforce such restrictions.
You Should Know:
To implement and manage MAM policies in Microsoft Intune, follow these steps:
- Sign in to Microsoft Endpoint Manager Admin Center:
– Navigate to Microsoft Endpoint Manager Admin Center.
2. Create or Modify MAM Policies:
- Go to Apps > App protection policies > Create Policy.
- Select iOS/iPadOS as the platform.
- Configure the policy settings, including the “Send Org data to other apps” option.
3. Enforce Screen Capture Restrictions:
- Set the “Send Org data to other apps” policy to None or Policy managed apps to enable the blank screen capture feature.
4. Deploy the Policy:
- Assign the policy to relevant user groups or devices.
- Monitor compliance and app protection status under Reports > App protection status.
Commands and Codes:
- PowerShell Command to Check MAM Policies:
Get-ManagedAppPolicy
This command retrieves a list of all managed app policies in your tenant.
-
PowerShell Command to Assign MAM Policy:
Add-ManagedAppPolicyAssignment -PolicyId <PolicyID> -TargetGroupId <GroupID>
Replace `` and `` with the appropriate values.
- Intune Graph API to Manage MAM Policies:
GET https://graph.microsoft.com/v1.0/deviceAppManagement/managedAppPolicies
Use this API to programmatically manage MAM policies.
What Undercode Say:
Microsoft’s update to MAM for iOS/iPadOS is a significant step forward in securing corporate data on BYOD devices. By preventing unauthorized screen captures, organizations can better protect sensitive information. To further enhance security, consider implementing additional Intune policies such as conditional access and multi-factor authentication. For advanced users, leveraging PowerShell and the Intune Graph API can streamline policy management and deployment. Always stay updated with the latest security features and best practices to ensure robust protection for your organization’s data.
For more details, refer to the official Microsoft documentation: Microsoft Intune Documentation.
References:
Reported By: Activity 7305302392135135233 – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
