Edit

Share via

Policies for Office apps

  • Article

Intune provides policies specifically for Microsoft 365 (Office) apps. You can select specific options to create mobile app management policies for Office mobile apps that connect to Microsoft 365 services. There are many policies for Office apps that you can add to Microsoft Intune and apply to groups of end users.

Examples of just a few of the Office app policies include the following:

  • Microsoft Word: Turn off Protected View for attachments opened from Outlook
  • Microsoft Visio: Block macros from running in Office files from the Internet
  • Microsoft Project: Allow Trusted Locations on the network
  • Microsoft Publisher: Publisher Automation Security Level
  • Microsoft PowerPoint: Turn off Protected View for attachments opened from Outlook

Note

When you select to configure each specific app policy, additional policy details are provided. You can filter the Office policy list to quickly select the recommended security baseline policies.

You can also protect access to Exchange on-premises mailboxes by creating Intune app protection policies for Outlook for iOS/iPadOS and Android enabled with hybrid Modern Authentication. Before using this feature, you must meet the requirements for using the Office cloud policy service. App protection policies are not supported for other apps that connect to on-premises Exchange or SharePoint services. For related information, see Overview of the Office cloud policy service for Microsoft 365 Apps for enterprise.

Prerequisites

You must meet the requirements to use policies for Office apps. For more information, see Requirements for using the Office cloud policy service.

To add an Office app policy

After you set up Intune for your organization, you can create an Office app policy.

  1. Sign in to the Microsoft Intune admin center.

  2. Select Apps > Policies for Office apps > Create.

  3. Add the following values:

    • Name: Type a name (required) for your new policy.
    • Description: (Optional) Type a description.
    • Select the scope: Select how this policy configuration will be applied.
    • Select the groups: If applicable, select the group for this policy configuration.
    • Configure settings: Select the Office policy that you want to apply. You can sort the provided list based on policy, platform, application, recommendation, and status.

  4. Select Create after reviewing the configuration. The policy is created and appears in the table on the Policy configurations pane.

    Tip

    The Policy configurations pane provides the Priority for each policy.

Quiet time notification policies

The global quiet time settings allow you to create policies to schedule quiet time for your end users. These settings automatically mute Microsoft Outlook email and Teams notifications on iOS/iPadOS and Android platforms. These policies can be used to limit end user work-related notifications received after work hours. You can find these settings in Microsoft Intune admin center by selecting Apps > Quiet Time > Policies.

Additional information

Next steps