Blocking unmanaged apps from accessing managed contacts in iOS

expand collapsive

Hello all,
Any way to block third-party apps from accessing corporate contacts on iOS? The thing is, our sales team has put in a request to be allowed to work on their personal devices and has agreed to enroll in Hexnode. So, everything from corporate mail to contacts will be present on their personal devices. Happy to comply with their request. But a little skeptical about the data security issues that will follow. Anything to make our decision making easier?
Thanks in advance!

All Replies

  • Participant



    @Noam Once we enrolled the devices of our employees, we applied a policy in which Open documents from managed apps in unmanaged apps was disabled. You can find this setting under Business Container in the Hexnode portal.

    Don’t worry. You will get the hang of things soon.

  • Hexnode



    Hi Noam,

    Thanks for reaching out to us.

    You can block third-party apps from accessing corporate contacts on iOS. To do so first make sure that corporate contacts are synced to the device by configuring the Exchange ActiveSync and/or CardDAV setting in the  Hexnode portal. This will make the contact managed. Check out our detailed help doc on configuring Exchange ActiveSync and CardDAV.

    To restrict unmanaged apps from accessing managed contacts:

    1. Open a New policy or an existing one. Provide a suitable Policy Name and Description. Select iOS > Business Container > Configure.
    2. Go through the settings and disable Unmanaged apps can read from Managed Contact Accounts if enabled.
    3. Associate the policy with the target devices. Click OK and Save the policy.

    Refer the detailed help doc on Business Container for iOS devices to know more. Hope I answered your query. Feel free to post your doubts here if you get any more.

    Deborah Timothy
    Hexnode MDM

  • Participant



    @Deborah I made a custom group including all those devices. (There were a lot of devices and my lazy self didn’t want to add each one separately.) It worked out well for all devices except two of them. Can’t seem to figure out the reason. Should I try adding them as individual devices?