Skip to content

Microsoft Intune Boosts iOS App Security with Screen Capture Block

Microsoft Intune's latest update secures iOS apps. Screen capture is now blocked by default, protecting sensitive data in managed apps.

In the picture I can see so many apps in the screen, except one app all apps are blurred.
In the picture I can see so many apps in the screen, except one app all apps are blurred.

Microsoft Intune Boosts iOS App Security with Screen Capture Block

Microsoft Intune has bolstered its app protection policies for iOS devices, now supporting the blocking of screen capture for mobile application management (MAM) protected apps. This new feature, which is enabled by default, ensures that when a user attempts to capture or share the screen, a blank screen is captured instead of the actual screen image.

The new screen capture control is managed through a specific key, 'com.our socials.intune.mam.screencapturecontrol', in Microsoft Intune's app configuration. This key, when set to 'Disabled', allows screen capture in managed apps. It's important to note that this key is not publicly listed, and its implementation by external organizations is not openly tracked.

For apps updated to use Intune App SDK v19.7.6 or later, screen capture is blocked by default if the 'Send Org data to other apps' setting is set to 'None' or any of the 'Policy managed apps...' values. However, this default behavior can be overridden by configuring policies in Microsoft Intune, specifically by setting the aforementioned key to 'Disabled'.

Microsoft Intune's latest update provides enhanced security for MAM-protected apps on iOS/iPadOS. While screen capture is blocked by default, administrators can easily allow it by setting the 'com.our socials.intune.mam.screencapturecontrol' key to 'Disabled' in their Intune policies.

Read also:

Latest