You try to open an email attachment in Outlook for iPhone, but nothing happens. The file fails to open, or you see a security warning. This is often caused by a mobile device management policy from Microsoft Intune. This article explains how to check and adjust the Intune policy to restore attachment access.
Key Takeaways: Fixing Outlook iPhone Attachment Blocking
- Intune App Protection Policy: A security rule that can block file transfers from managed apps like Outlook to unmanaged apps on your device.
- Microsoft Endpoint Manager admin center: The portal where your IT administrator can review and edit the app protection policy settings.
- Save As or Open In behavior: The specific policy setting that controls whether you can save attachments or open them in other applications.
Why Intune Policies Block Outlook Attachments
Microsoft Intune helps organizations secure company data on mobile devices. It uses App Protection Policies to create a security boundary around approved apps like Outlook. These policies can restrict data movement to prevent leaks.
A common restriction is blocking the transfer of files from a managed app to an unmanaged app. Outlook is a managed app. Your device’s native file viewer or a third-party PDF reader might be considered unmanaged. When you tap an attachment, Outlook tries to send the file to another app to open it. If the policy blocks this transfer, the attachment will not open.
Policy Settings That Affect Attachments
Several specific policy settings control attachment behavior. The Save as setting dictates if users can save files locally. The Transfer data to other apps setting has options like Policy managed apps or All apps. If set to Policy managed apps only, you can only open attachments in other Intune-managed apps. If you lack those apps, opening fails.
Steps for Your IT Admin to Check the Intune Policy
Only an Intune administrator can change these policies. Provide these steps to your IT support team.
- Sign in to the Microsoft Endpoint Manager admin center
Go to the Intune portal and navigate to Apps > App protection policies. - Locate the policy applied to Outlook users
Select the relevant policy that applies to the iOS/iPadOS platform and your user group. - Review the Data Protection settings
Click Properties, then Edit next to Data Protection. Scroll to the Data Transfer section. - Check the “Save copies of org data” setting
Ensure this is not set to Block. Setting it to Allow permits saving attachments. - Check the “Transfer data to other apps” setting
For broader compatibility, change this from Policy managed apps to All apps. Alternatively, set it to Policy managed apps with OS sharing or Policy managed apps with Open-In/Share filtering. - Save and assign the updated policy
Click Review + save, then Save. The updated policy will deploy to user devices, which may take a few hours.
If the User Still Cannot Open Attachments
Outlook Says “This File Cannot Be Opened”
The policy may be correctly configured, but the device needs to receive it. Ask the user to force-close the Outlook app and reopen it. If that fails, the user can check for a policy sync. They can open the Company Portal app, go to Settings, and tap Sync. This action requests the latest policies from Intune.
Attachment Opens in Outlook Viewer But Not Another App
Outlook has a built-in viewer for images and PDFs. If a file opens here but not in another app, the Transfer data to other apps policy is still restrictive. The admin must adjust this setting as described in step five above. Confirm the target app, like Adobe Acrobat, is installed and updated on the iPhone.
Only Specific File Types Are Blocked
Intune policies can also restrict file types based on extension. The admin should check for a Select file types for unmanaged apps setting. If .zip or .exe files are blocked, they can be added to an exception list. Common document types like .pdf and .docx are typically allowed.
Intune Policy Attachment Settings: Restrictive vs. Permissive
| Item | Restrictive Policy Setting | Permissive Policy Setting |
|---|---|---|
| Save copies of org data | Block | Allow |
| Transfer data to other apps | Policy managed apps only | All apps |
| Open data into Org documents | Block | Allow |
| User impact | Attachments cannot be saved or opened externally | Attachments can be saved and opened in any app |
| Security level | High – prevents data exfiltration | Moderate – relies on app-level security |
You can now identify if an Intune policy is blocking attachments in Outlook for iPhone. Provide the specific policy check steps to your IT administrator. For broader mobile access, they might also review Conditional Access policies. A concrete advanced tip is to use the Policy managed apps with Open-In/Share filtering setting. It allows transfers but lets admins block specific unmanaged apps.