How to Configure Acrobat Reader Mobile URL Protocol for Intune App Protection
Question details
Organizations need to identify the correct URL protocol and app protection configurations to open PDF files from Outlook Mobile in Adobe Acrobat Reader securely via Microsoft Intune.
- Product
- Adobe Acrobat Reader Mobile
- Device & OS
- not provided
- Scenario
- Administrators are trying to configure Intune App Protection Policies to allow managed Outlook Mobile apps to securely pass PDF attachments to Adobe Acrobat Reader.
- Observed behavior
- PDF files fail to open properly from Outlook Mobile into Acrobat Reader, requiring correct device enrollment, URL protocol definitions, and Exchange Connector settings.
Verify whether the affected mobile devices are running iOS or Android, as the required URL schemes and Intune app protection configurations differ between operating systems.
Verify Device Enrollment and App Protection Configuration
Check your organization's device enrollment status and collect specific error messages to identify why the URL protocol is failing.
Before defining custom URL protocols, it is critical to ensure that the mobile devices are successfully enrolled in Intune or properly targeted by Mobile Application Management (MAM) policies without enrollment.
Different operating systems require different configuration parameters. Identifying the OS and gathering exact error prompts will streamline the troubleshooting process.
Determine if the devices experiencing the issue are iOS or Android. iOS typically uses the 'com.adobe.Adobe-Reader' custom URL scheme for App Protection Policies.
Log into the Microsoft Endpoint Manager admin center, navigate to Devices > All devices, and verify that at least one device has successfully enrolled and received the compliance policy.
Go to Apps > App protection policies. Ensure that the policy assigned to Outlook Mobile allows 'Send org data to other apps' and that Adobe Acrobat Reader is included in the approved apps list.
Reproduce the issue on a managed device by attempting to open a PDF attachment in Outlook Mobile. Document any specific error messages (e.g., 'Your organization's data cannot be pasted here') for further diagnosis.
Troubleshoot Intune Exchange Connector for Managed Email
Verify that the Intune Exchange Connector is functioning properly to ensure managed devices can synchronize and protect email attachments.
Manage and Edit PDF Files Seamlessly with WPS Office
If configuring complex Intune app protection policies for third-party readers is slowing down your workflow, consider using WPS Office. It provides a lightweight, highly compatible alternative for securely viewing, editing, and managing PDFs and Office documents on mobile devices.
- 1. Download the WPS Office App: Search for WPS Office in the Apple App Store or Google Play Store and install the free application.
- 2. Open Your PDF Attachments: Tap on any PDF file in your mobile email client and select 'Open with WPS Office' from the share menu.
- 3. View and Annotate Securely: Use the integrated PDF tools within WPS Office to highlight, sign, or edit your documents on the go.
Frequently Asked Questions
What is the custom URL scheme for Adobe Acrobat Reader on iOS?
For iOS devices managed via Intune, the standard custom URL scheme to target Adobe Acrobat Reader in App Protection Policies is generally 'com.adobe.Adobe-Reader'.
Why does Outlook Mobile block opening PDFs in Adobe Acrobat Reader?
This occurs if your Intune App Protection Policy restricts data transfer to unmanaged apps. You must ensure that Adobe Acrobat Reader is added to the list of approved managed applications in your Microsoft Endpoint Manager admin center.
Do mobile devices need to be fully enrolled in MDM to use App Protection Policies for PDFs?
No. Microsoft Intune supports Mobile Application Management (MAM) without full device enrollment. This allows you to apply app protection policies directly to Outlook and Acrobat Reader to secure company data on personal (BYOD) devices.
How can I test if the App Protection Policy is successfully applied?
You can verify policy application by opening Microsoft Edge or Outlook on the managed mobile device, typing 'about:intl' in the Edge address bar (or checking Outlook app settings), and reviewing the active MAM policy status to ensure the PDF reader is listed.
