iOS – Screen Capture Restriction Not Working for Microsoft Outlook (Intune App Protection Policy Applied)

Hello,

We are experiencing an issue where the screen capture (screenshot) restriction is not working on iOS devices for Microsoft Outlook, even though Intune App Protection Policies (MAM) are applied.

Important:

I would like to emphasize that I do not want my users to be able to take screenshots in any Microsoft application such as Outlook, Teams, etc. My intention is to completely block screenshot capturing within all Microsoft apps that handle organizational data.

Details:

App: Microsoft Outlook

Version: 4.2514.0 (36087690)

Intune SDK Version: 20.4.1

Device: iPhone (iPhone14,5)

iOS Version: 17.7

Device Management: Unmanaged

App Protection Status: Protected

Compliance: Compliant

Policy Applied: App Protection Policy (MAM) with “Send org data to other apps = None”

App Configuration Policy: com.microsoft.intune.mam.screencapturecontrol is not explicitly set, so default behavior should block screenshots

Testing: Device was wiped and Outlook reinstalled, but screenshots can still be taken in Outlook app

Background:

Up until about a month ago, everything was working as expected. My users could not copy any content from their emails or take screenshots in Outlook or other Microsoft apps. Recently, some users requested to be able to copy their IBAN or bank account numbers from their emails. To accommodate this, I adjusted the policy to allow a maximum of 32 characters to be copied. Ever since making this change, users have suddenly been able to take screenshots, and I am no longer able to block screen capture as I did before. I am attaching a screenshot for reference.

Steps tried:

Confirmed App Protection Policy is targeted at the correct user and Microsoft Outlook is included as a targeted app.

Confirmed the policy is applied and user status is “Protected” and “Compliant” in Intune logs.

Device is not managed (no MDM), only MAM/App Protection.

No explicit app configuration set for screencapturecontrol, relying on default behavior.

Problem:

Despite all these settings, users are still able to take screenshots within the Outlook app on iOS devices.

Request:

Is there any recent change in how Intune/MAM policies handle screenshot blocking for iOS?

Are there any extra requirements or known limitations for unmanaged iOS devices, even when the app protection policy is “Protected” and “Compliant”?

Is it necessary to explicitly push com.microsoft.intune.mam.screencapturecontrol = Enabled via App Configuration Policy, or should default behavior already block screenshots when “Send org data to other apps = None”?

Any suggestions or troubleshooting steps would be greatly appreciated.

Thank you!

(Screenshot attached.)