If you observe the PIN being wiped on some devices, the following is likely happening: Since the PIN is tied to an identity, if the user signed in with a different account after a wipe, they will be prompted to enter a new PIN. You'll also require multi-factor authentication (MFA) for Modern authentication clients, like Outlook for iOS and Android. Conditional Access policy There are a few additional requirements that you want to be aware of when using App protection policies with Microsoft Office apps. From a security perspective, the best way to protect work or school data is to encrypt it. Your employees use mobile devices for both personal and work tasks. App protection policies can be created and deployed in the Microsoft Intune admin center. When you embark upon creating an App Protection policy from Intune for the iOS/iPadOS platform, the very first step is to decide the Management type applicability of the policy - is the policy being created to work for. Later, when they use OneDrive with their personal account, they can copy and move data from their personal OneDrive without restrictions. On the Include tab, select All users, and then select Done. For example, if applicable to the specific user/app, a minimum iOS/iPadOS operating system setting that warns a user to update their iOS/iPadOS version will be applied after the minimum iOS/iPadOS operating system setting that blocks the user from access. See Remove devices - retire to read about removing company data. 1. what is managed or unmanage device? Next you'll see a message that says you're trying to open this resource with an app that isn't approved by your IT department. 4. can intune push down policy/setting/app to both managed and unmanage device? This global policy applies to all users in your tenant, and has no way to control the policy targeting. The data transfer succeeds and the document is tagged with the work identity in the app. As such, only if apps A and B have the same policies applied (with respect to PIN), user may set up the same PIN twice. Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.