Forum Discussion

Simon's avatar
Simon
Level 2.0: Eclair
9 months ago

Copy-paste issue (COPE)

Hello Everyone, I have a slight issue with copy-paste on Corporate owned, personal enabled devices (COPE) managed via Intune. To put it simple - people can copy text from work profile to personal. H...
Michel's avatar
Michel
Level 2.3: Gingerbread
8 months ago

Did you try the option "Data sharing between work and personal profiles"  in Intune? You can find it in the restrictions profiles under general settings. 

 

 

I have no test devices in Intune at the moment, but I believe this should do the trick. 

 

In KSP you have an option to allow clipboard sharing between work container en personal profile, but this is disabled by default:

 

 

  • Moombas's avatar
    Moombas
    Level 4.1: Jelly Bean
    8 months ago

    Just to add here, i see more options available in KSP as well:

     

    • Simon's avatar
      Simon
      Level 2.0: Eclair
      8 months ago

      Settings related to files is what Samsung guys initially suggested, but it has no effect on copy-paste of text according to my testing.

      Re your earlier comment, Intune is not perfect, but I find working with Intune protected apps (Intune App SDK) refreshing.

      • Moombas's avatar
        Moombas
        Level 4.1: Jelly Bean
        8 months ago

        In my opinion the lowest option ("Enable sharing of Clipboard Data to Owner") should be the one to look into.

        Everyone is fine to choose his/her prefered MDM 😉 And to be honest, i don'T have experience with Intune protected apps as it looks like something i don't use but as long as i can use managed app config and also Microsoft 365 integration in our MDM i stay with that 😛

  • Simon's avatar
    Simon
    Level 2.0: Eclair
    8 months ago

    Thanks for your response. That Intune setting is for file access only. It restricts accessing files from personal profile, which in my world is part of the job. Re text copy-paste Intune has another:

    What's worse, is that if policy is created for BYOD and not COPE, the settings are "Block" and "Not configured".

     

    I did set the KSP setting you mentioned to "false", but it had no effect in my scenario. The documentation I found implies it's to do with clipboard sharing between the devices. Not bothered about that currently ðŸ˜Š

     

    I strongly believe I need to find a way how to control CrossProfileCopyPaste setting:

    https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#crossprofilecopypaste

    • Michel's avatar
      Michel
      Level 2.3: Gingerbread
      8 months ago

      ah okay, i understand!

       

      Just to be sure: You want to block copy and paste from work to personal, but keep the option to transer files from work to personal?

       

       

      • Simon's avatar
        Simon
        Level 2.0: Eclair
        8 months ago

        The goal is to block copy-paste from work to personal profile (text and files), but leave the option to copy-paste from personal to work profile (text and files). In a nutshell, data transfer is possible only one way

Recent Discussions