Question

Your company allows employees to access Microsoft 365 email and files from personal (BYOD) iOS and Android devices that are NOT enrolled in Intune. You have deployed an app protection policy (APP) targeting the Outlook and OneDrive mobile apps. An employee reports their personal phone was lost. Management wants only the corporate data removed from the affected apps while leaving the employee's personal photos and apps untouched. What should you do from the Microsoft Intune admin center?

Accepted Answer

Create a selective wipe request under Apps > App selective wipe for the user's account and device.

Answer

Issue a Wipe device action from Devices > All devices for the affected phone.

Answer

Issue a Retire device action to remove company data while keeping personal data.

Answer

Delete the user's account from Microsoft Entra ID to revoke all app access.