Include Android system-service exemptions in app-protection transfer tests
Why can an Android managed app exchange data with a system service under an app-protection policy?
Read the guideDSE security knowledge hubIT
IT
Knowledge
Page 19 of the DSE IT knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide IT knowledge center
Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.
DSE post stream
1,297 articlesIT
Account for exported Outlook contacts after an Intune iOS retirement
Why can previously exported Outlook contacts remain on iOS after an Intune Retire action?
Read the guide
Request fresh client events before reloading a tenant-attached device timeline
What is the difference between Sync and Refresh when investigating a tenant-attached device timeline?
Read the guide
Check resource-level authority when an Azure Advisor dismissal fails
A visible recommendation action can still fail its permission check.
Read the guide
Inspect empty time buckets before interpreting an Azure Workbook chart window
A query can omit intervals that contain no records.
Read the guide
Install Bicep separately for PowerShell deployment hosts
The Bicep copy managed by Azure CLI is not the PowerShell compiler installation.
Read the guide
Replace the deprecated blob-tag read suboperation when reviewing ABAC conditions
DSE recommends identifying the actual action or suboperation in the saved condition before revising it.
Read the guide
Test session changes when Defender device control targets users
Why can locking or signing out of a device change the outcome of a user-targeted device-control rule?
Read the guide
Test the invocation path of an iOS app-protection transfer exception
Why can an exempt unmanaged iOS app still fail to receive data through copy-and-paste or Open-in?
Read the guide
Distinguish autoscale metric failure from a rule that did not trigger
Use the documented metric-failure and recovery events to classify missing decision data.
Read the guide