Protection des Données Personnelles avec Microsoft Intune : Comprendre les Collectes et Utilisations (2024)

FAQs

Does Intune spy on you? ›

Intune doesn't collect nor allow an Admin to see the following data: An end users' calling or web browsing history. Personal email. Text messages.

As an administrator, you can create exceptions to the Intune App Protection Policy (APP) data transfer policy. An exception allows you to specifically choose which unmanaged apps can transfer data to and from managed apps. Your IT must trust the unmanaged apps that you include in the exception list.

New apps that appear without your knowledge, strange messages or notifications, and a slower-running device are also potential signs. Overheating, increased data usage, unusual noises during calls, and difficulties in shutting down the phone could also indicate tracking.

Device Location History: Beyond just knowing where a device is now, MDM tools can track where it's been. This historical data can be invaluable, offering insights into usage patterns, identifying potential security risks, and helping recover lost or stolen devices by retracing their movements.

Right after the enrollment Windows 10 devices checks policies and settings every 3 minutes for 15 minutes, then every 15 minutes for 2 hours, and then around every 8 hours. Already enrolled device checks Intune settings every 8 hours.

By default, Intune devices check in every 8 hours and the Last check-in value also updates every 8 hours in the Intune portal. If Last check in is more than 24 hours, there may be an issue with the device.

The user must open the app for the wipe to occur, and the wipe may take up to 30 minutes after the request was made.

If you want to stop taking screenshots on the entire device, you can block the feature at the device level using the Intune device restriction policy. If you want to block screen capture on specific apps like Outlook, etc., you can prevent the feature using an app protection policy.

Is IT possible to enforce Intune policies without enrolling devices? ›

Company Portal app and Intune app protection

Device enrollment is not required even though the Company Portal app is always required. For Mobile Application Management (MAM), the end user just needs to have the Company Portal app installed on the device.

Intune also enables administrators to enforce data protection and compliance through device configuration and compliance policies. These policies allow for the fine-tuning of device settings, authentication methods, VPN configurations, software updates, and security baselines.

You can protect access and data on organization-owned and users personal devices. And, Intune has compliance and reporting features that support the Zero Trust security model.

Go to PC Settings > Network > Workplace. Under Workplace Join, select Leave. Under Turn on device management, select Turn off. On the popup window that opens, select Turn off.

For security purposes, Intune maintains audit logs for user and device actions for one year. These logs are automatically deleted after the one-year retention period. To review audit logs, see Audit logs for Intune activities. Admins can't delete audit logs.

Your organization can't see your personal information when you enroll a device in Microsoft Intune. Enrolling your device makes certain information, such as device model and serial number, visible to IT administrators and support people with administrator access.

There are several types of logs that Intune provides: ‍ Audit Logs: These logs track and monitor activities such as policy changes, device enrollment, and app management. They provide a record of actions taken by users and administrators, offering insights into who did what and when.

When you use the Locate device action for an Android Enterprise dedicated device that is off-line and unable to respond with its current location, Intune attempts to display its last known location. This capability uses data submitted by the device when it checks in with Intune.