How to Configure Adobe Acrobat for Microsoft Intune Data Protection on iOS
Question details
Organizations need to prevent Adobe Acrobat from saving or exporting managed business documents to local iPhone storage using Microsoft Intune.
- Product
- Adobe Acrobat, Microsoft Intune
- Device & OS
- iOS
- Scenario
- Securing business documents on iOS devices managed by an organization to prevent data leaks.
- Observed behavior
- Ensuring business documents cannot be saved to local iPhone storage and that data transfers are strictly limited to managed applications.
Ensure you have administrator access to the Microsoft Endpoint Manager admin center and that the target iOS devices are properly registered in Microsoft Intune.
Configure Intune App Protection Policies for Acrobat
Create and apply an Intune Mobile Application Management (MAM) policy specifically targeting Adobe Acrobat to restrict local saving and control data transfer.
Applying a targeted app protection policy allows your organization to control corporate data securely within Adobe Acrobat without managing the entire device. This prevents unauthorized exports to unmanaged local storage.
Sign in to the Microsoft Endpoint Manager admin center and navigate to 'Apps' > 'App protection policies' in the left-hand menu.
Click 'Create policy' and select 'iOS/iPadOS' from the dropdown. Enter a descriptive name for your policy and proceed to the Apps section to select Adobe Acrobat from the list of public apps.
In the Data Protection section, set the 'Send org data to other apps' option to 'Policy managed apps'. This ensures documents can only be shared with other secure apps like managed Outlook or OneDrive.
Locate the 'Save copies of org data' setting and configure it to block saving to local device storage. You may optionally add exceptions for managed services like SharePoint or OneDrive for Business.
Complete the policy creation by assigning it to the appropriate user groups. Open Adobe Acrobat on a targeted iOS device and verify that the option to save a corporate document to the local iPhone storage is blocked.
Securely Manage PDFs and Office Documents on Mobile with WPS Office
If you are looking for a reliable, lightweight application to handle business documents securely, WPS Office offers comprehensive mobile PDF and Office editing features that support enterprise mobility needs.
- 1. Install WPS Office for iOS: Open the App Store on your iPhone or iPad, search for WPS Office, and download the application.
- 2. Sign In Securely: Launch the app and log in using your preferred corporate or personal credentials to access cloud storage integrations securely.
- 3. Edit and Protect Documents: Open any PDF or Office file to begin editing. Use the built-in encryption tools under the 'Tools' menu to add passwords and restrict file permissions.
Frequently Asked Questions
Can I allow users to save Acrobat files to managed cloud storage instead of local iOS storage?
Yes. In the Intune App Protection policy under 'Save copies of org data', you can select 'Allow user to save copies to selected services' and specify corporate locations like OneDrive for Business or SharePoint, while keeping local storage blocked.
Why can users still save PDFs to their iPhone despite the Intune policy?
This usually occurs if the user is signed into Acrobat with a personal identity instead of their corporate account, if the policy assignment group didn't include the specific user, or if the device has not yet synced the latest policy updates from Endpoint Manager.
Does this Intune policy prevent users from saving their personal PDFs in Acrobat?
No. Intune App Protection policies utilize multi-identity support. The restrictions and data protection rules only apply to documents associated with the user's managed corporate account. Their personal documents remain unaffected.
