In our MDM is an option to turn off the possibility to copy/paste from work profile to the user profile.
Same for sharing from work profile to personal profile.
But i never tested that but pretty sure someone would have raised an issue about that in the community of our MDM already if that would have been the case but haven't seen something like this the last years.
So, i think it's not an Android issue but more likely again an Intune issue (I'm so happy we didn't swithc to it in the past when i read all the issue here about it + our testing exerience).
But it would be good if someone with experience with using this functionality could shortly verify here that it's working on their end (from any MDM).
Did you try the option "Data sharing between work and personal profiles" in Intune? You can find it in the restrictions profiles under general settings.
I have no test devices in Intune at the moment, but I believe this should do the trick.
In KSP you have an option to allow clipboard sharing between work container en personal profile, but this is disabled by default:
Just to add here, i see more options available in KSP as well:
In my opinion the lowest option ("Enable sharing of Clipboard Data to Owner") should be the one to look into.
Everyone is fine to choose his/her prefered MDM 😉 And to be honest, i don'T have experience with Intune protected apps as it looks like something i don't use but as long as i can use managed app config and also Microsoft 365 integration in our MDM i stay with that 😛
Thanks for your response. That Intune setting is for file access only. It restricts accessing files from personal profile, which in my world is part of the job. Re text copy-paste Intune has another:
What's worse, is that if policy is created for BYOD and not COPE, the settings are "Block" and "Not configured".
I did set the KSP setting you mentioned to "false", but it had no effect in my scenario. The documentation I found implies it's to do with clipboard sharing between the devices. Not bothered about that currently 😊
I strongly believe I need to find a way how to control CrossProfileCopyPaste setting:
I just tested the policies mentioned by @Moombas , and it seems to do exactly what you want. When set up like shown in the picture below, i'm unable to copy and paste text or files from work to personal while still being able copy from personal to work.
This can be configured within the KSP plugin, the screenshot is from Knox Manage but it shows the KSP part which works the same for both.
- Set Enable work profile policies to true
- Find RCP policy (premium function, you need the free KPE licenses from your knox tenant)
- Set as shown in above picture.
Thanks for testing. I would say I have the same config:
KSP has no errors on the phone, displays new profile name and all the settings, but I still can launch Chrome in work profile, copy text and paste into any app in the personal profile.
The license is there (deleted it in the screenshot). KSP on the device displays message "Successfully activated license key ending with..." So I ruled license issues out
Added additional setting as per your message:
Still the same experience - can copy text from work profile apps.
Would be funny if it wasn't sad 😑
Maybe now it makes sense to open a support case @Samsung but one thing you could check before (and maybe grab for such a case) is enabling the debug mode and check what it tells you. Maybe for some reason the clipboard poilcy fails to apply. But if not, there is maybe an issue in the firmware or so.
That looks like the one I was looking for but it seems to be lacking some information.
Couple of things that I see in this config (you might have configured it but did not copy it to your post):
- No license key - You need a KPE license (free) at least (RCP is marked as a premium function which used to be a paid license)
- The policy to allow files from work to personal (first one in the code) appears to be set to true, while you had it set to false in the screenshot you shared earlier.
- Same for clipboard data
- The RCP function is indeed not needed here, you don't need to set it to true of false.
- The section above the RCP policies is not enabled ( Work profile polices (Profile Owner) -> Set Enable work profile policies to true).
I tried to replicate the issue you are experiencing since I don't understand why it should not work. But with all the settings mentioned in this topic, I was still able to copy paste from work to personal. Since I had to get back to work, I moved my user account of my demo device back to its original group I use for trainings and that group seems to have a policy, or a mix of policies, that solved it.
I'm not able to copy paste form work to personal, and i'm not able to move files from work to personal. But I am able to copy paste to my work profile and share files with work profile apps.
I will share the config below and leave it up to you to figure out what works for you, since I really have to get back to my work 😂
Knox Service plugin. (with a free Knox platform for Enterprise license key)
And the Intune - Android Enterprise restrictions profile:
Good luck and please let me know what did the trick if you find out!
Reg. license key: he did copy this:
"kpePremiumLicenseKey": {
"mData": null,
"mMessage": "Successfully activated license key ending with ...PNJZ",
"mPolicyStatus": true,
"mReportStatus": 1
Which means a license key is there.
