Remote Desktop Microsoft Corporation

-->

Use Microsoft Remote Desktop for Android to connect to a remote PC or virtual apps and desktops made available by your admin. With Microsoft Remote Desktop, you can be productive no matter where. We are a Microsoft partner who delivers a SAS app to 100’s of users via remote desktop and remote app. More than half of our users are on Mac’s and use Microsoft Remote Desktop. We have found Version 10 much harder to setup on users desktops because unlike the prior version where most of the information was in one place - now its spread.

Applies to:

  • Windows 10, version 1607 and later
  • Windows 10 Mobile, version 1607 and later

Learn the difference between enlightened and unenlightened apps, and then review the list of enlightened apps provided by Microsoft along with the text you will need to use to add them to your allowed apps list.

Enlightened versus unenlightened apps

Apps can be enlightened or unenlightened:

Remote Desktop Microsoft Corporation
  • Enlightened apps can differentiate between corporate and personal data, correctly determining which to protect, based on your policies.

  • Unenlightened apps consider all data corporate and encrypt everything. Typically, you can tell an unenlightened app because:

    • Windows Desktop shows it as always running in enterprise mode.

    • Windows Save As experiences only allow you to save your files as enterprise.

  • WIP-work only apps are unenlightened line-of-business apps that have been tested and deemed safe for use in an enterprise with WIP and Mobile App Management (MAM) solutions without device enrollment. Unenlightened apps that are targeted by WIP without enrollment run under personal mode.

List of enlightened Microsoft apps

Microsoft has made a concerted effort to enlighten several of our more popular apps, including the following:

  • Microsoft 3D Viewer

  • Microsoft Edge

  • Internet Explorer 11

  • Microsoft People

  • Mobile Office apps, including Word, Excel, PowerPoint, OneNote, and Outlook Mail and Calendar

  • Microsoft 365 Apps for enterprise apps, including Word, Excel, PowerPoint, OneNote, and Outlook

  • OneDrive app

  • OneDrive sync client (OneDrive.exe, the next generation sync client)

  • Microsoft Photos

  • Groove Music

  • Notepad

  • Microsoft Paint

  • Microsoft Movies & TV

  • Microsoft Messaging

  • Microsoft Remote Desktop

  • Microsoft To Do

Note

Microsoft Visio, Microsoft Office Access, Microsoft Project, and Microsoft Publisher are not enlightened apps and need to be exempted from WIP policy. If they are allowed, there is a risk of data loss. For example, if a device is workplace-joined and managed and the user leaves the company, metadata files that the apps rely on remain encrypted and the apps stop functioning.

List of WIP-work only apps from Microsoft

Microsoft still has apps that are unenlightened, but which have been tested and deemed safe for use in an enterprise with WIP and MAM solutions.

  • Skype for Business

  • Microsoft Teams (build 1.3.00.12058 and later)

Remote desktop microsoft for mac

Adding enlightened Microsoft apps to the allowed apps list

Note

Remote

As of January 2019 it is no longer necessary to add Intune Company Portal as an exempt app since it is now included in the default list of protected apps.

Remote Desktop Microsoft CorporationRemote Desktop Microsoft Corporation

You can add any or all of the enlightened Microsoft apps to your allowed apps list. Included here is the Publisher name, Product or File name, and App Type info for both Microsoft Intune and Microsoft Endpoint Configuration Manager.

Product nameApp info
Microsoft 3D ViewerPublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Microsoft3DViewer
App Type: Universal app
Microsoft EdgePublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.MicrosoftEdge
App Type: Universal app
Microsoft PeoplePublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.People
App Type: Universal app
Word MobilePublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Office.Word
App Type: Universal app
Excel MobilePublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Office.Excel
App Type: Universal app
PowerPoint MobilePublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Office.PowerPoint
App Type: Universal app
OneNotePublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Office.OneNote
App Type: Universal app
Outlook Mail and CalendarPublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: microsoft.windowscommunicationsapps
App Type: Universal app
Microsoft 365 Apps for enterprise and Office 2019 Professional PlusMicrosoft 365 Apps for enterprise and Office 2019 Professional Plus apps are set up as a suite. You must use the O365 ProPlus - Allow and Exempt AppLocker policy files (.zip files) to turn the suite on for WIP.
We don't recommend setting up Office by using individual paths or publisher rules.
Microsoft PhotosPublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Windows.Photos
App Type: Universal app
Groove MusicPublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.ZuneMusic
App Type: Universal app
Microsoft Movies & TVPublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.ZuneVideo
App Type: Universal app
Microsoft MessagingPublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Messaging
App Type: Universal app
IE11Publisher:O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Binary Name: iexplore.exe
App Type: Desktop app
OneDrive Sync ClientPublisher:O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Binary Name: onedrive.exe
App Type: Desktop app
OneDrive appPublisher:CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Microsoftskydrive
Product Version:Product version: 17.21.0.0 (and later)
App Type: Universal app
NotepadPublisher:O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Binary Name: notepad.exe
App Type: Desktop app
Microsoft PaintPublisher:O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Binary Name: mspaint.exe
App Type: Desktop app
Microsoft Remote DesktopPublisher:O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Binary Name: mstsc.exe
App Type: Desktop app
Microsoft MAPI Repair ToolPublisher:O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Binary Name: fixmapi.exe
App Type: Desktop app
Microsoft To DoPublisher:O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Product Name: Microsoft.Todos
App Type: Store app

Note

Microsoft Remote Desktop Install

Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see Editing Windows IT professional documentation.