Validate app protection settings on Windows 10 PCs

Verify that users cannot copy company data to personal files on corporate devices

After you set up app protection policies, it may take up to a few hours for the policy to take effect on users’ devices. If you turned On the Prevent users from copying company data to personal files and force them to save work files to OneDrive for Business setting for company owned devices, you can check this on the user's device after they have connected to Azure AD and signed in.

Verify connection settings

  1. After you sign in with Microsoft 365 Business credentials and connect to Azure AD as described in Set up Windows devices for Microsoft 365 Business users, go to Windows Settings > Accounts > Access work or school. Choose Connected to <tenant name> Azure AD, and then choose Info.

    Click or tap Info on the Connected to Azure AD dialog.
  2. On the Managed by <tenant name> page you can see the Connection info that includes a Management Server Address like the one shown in the following figure.

    Managed by page shows connection info of the device manager URL.

Verify that you cannot paste company data to a non-managed app

  1. Open Outlook 2016 that was installed by Microsoft 365 Business.

  2. Open an email and copy some content from it.

    Open Notepad and attempt to paste the content in.

    You will receive an error that states App can't access content.

    A dialog that states app can't access content when you paste into an unmanaged app.

    You can, however, paste the same content into Word 2016.

Verify that users cannot copy company data to personal files on personal devices

Verify connection settings

  1. On your Windows 10 personal device where you are logged in as a local user, go to Windows Settings and click or tap Accounts > Access work or school.

  2. Under the Access work or school, choose Connect.

  3. Enter your Microsoft 365 Business credential into the Set up a work or school account dialog > Sign in.

  4. On the Access work or school page, choose the Work or school account, and then choose Info.

    Click or tap Info on the Work or school account dalog.
  5. On the Access work or school page you can see the Connection info that includes a Management Server Address like the one shown in the following figure, and includes the words wip and mam within.

    Managed by page shows connection info URL that includes the words mam and wpi.

Verify that you cannot paste company data to a non-managed app

  1. Open Outlook 2016 and add your Microsoft 365 Business account if necessary and sign in with your Microsoft 365 Business credentials.

  2. Open an email and copy some content from it.

    Open Notepad and attempt to paste the content in.

    You will receive an error that states App can't access content.

    A dialog that states app can't access content when you paste into an unmanaged app.

    You can, however, paste the same content into Word 2016.

Connect with an expert
Contact us
Expand your skills
Explore training

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×