How to Prevent Adobe Acrobat iOS Email Attachment Data Leakage in Intune
Question details
Users need a way to stop data leakage occurring when PDF attachments are opened from Outlook via the Adobe Acrobat iOS email attachment connector.
- Product
- Adobe Acrobat iOS, Microsoft Intune
- Device & OS
- iOS
- Scenario
- Opening PDF attachments from the Outlook email connector into Adobe Acrobat for iOS within a managed Intune environment.
- Observed behavior
- PDF attachments opened through the email connector can be copied to unmanaged locations because existing Intune keys fail to restrict this specific connector.
Before applying these mitigations, ensure you have administrative access to the Microsoft Endpoint Manager admin center and verify your current App Protection Policies (APP) for Microsoft Outlook.
Restrict Outlook Attachments Using Intune App Protection Policies
The most effective immediate mitigation is to restrict how Outlook handles attachments globally until Adobe releases a dedicated patch for the connector.
Since the specific Adobe Acrobat email connector currently lacks its own Intune configuration key, you must rely on overarching Outlook policies to prevent the data from leaving managed boundaries.
Log in to the Microsoft Endpoint Manager admin center using your Intune administrator credentials.
Go to 'Apps' in the left-hand navigation menu, then select 'App protection policies' under the Policies section.
Select the existing iOS policy applied to Microsoft Outlook. Click 'Properties' and choose to edit the 'Data protection' settings.
Locate the 'Send org data to other apps' setting. Change its value to 'Policy managed apps' or 'None' to prevent attachments from leaking into unmanaged locations.
Temporarily Remove Adobe Acrobat for iOS from Managed Devices
If data leakage is a critical security concern, removing the app prevents the vulnerability entirely while awaiting a permanent fix from Adobe.
Open a Support Ticket with Adobe
Escalating the issue directly to Adobe Support can help clarify the timeline for new App Configuration keys that govern the email attachment connector.
Try WPS Office for Secure Mobile Document Management
If you are facing data protection challenges or configuration gaps with your current PDF or Office apps on mobile, consider switching to WPS Office. It provides a lightweight, highly compatible alternative for viewing, editing, and managing your Office documents securely.
- 1. Download WPS Office: Search for WPS Office in the Apple App Store and install it on your iOS device.
- 2. Open Your Documents: Launch the app and open your PDF, Word, Excel, or PowerPoint files directly.
- 3. Manage Files Securely: Utilize built-in tools to read, annotate, and manage your documents safely and efficiently.
Frequently Asked Questions
Why does the Adobe Acrobat iOS email connector bypass Intune policies?
The specific email attachment connector in Adobe Acrobat for iOS is a newer feature that currently lacks dedicated App Configuration keys in Intune, meaning older restrictions like 'allowOpenFromManagedToUnmanaged' do not apply to it.
Can I block just the email connector in Adobe Acrobat iOS?
Currently, Adobe has not documented a specific Intune key to disable only the email attachment connector. You must rely on Outlook App Protection Policies to restrict attachment sharing globally.
How do I know if my organization is affected by this data leakage?
If your iOS users use Outlook to open PDF email attachments directly into managed Adobe Acrobat, they may be able to save or copy those files to local or unmanaged cloud storage, bypassing your intended Intune rules.
