# How to use 'Nine Work for Intune' and set Configuration ## **Introduction** Nine Work is a full-fledged email application for Android based on Direct Push technology to synchronize with Microsoft Exchange Server using Microsoft Exchange ActiveSync, and also designed for entrepreneurs or ordinary people who want to have efficient communication with their colleagues, friends, ‎and family members at anytime, anywhere. You may already have good experience with other E-Mail apps for Android. Regardless of your existing experience, we will give you a superb experience more than anything else. Leveraging E-Mail, Contacts, Calendar, Tasks and Notes on your mobile devices through wireless networks enhances your user experience and dramatically reduces your time. **Android Package Name: com.ninefolders.hd3.work.intune** ### **How to add Nine Work for Intune into Intune Company Portal** **# Reference link:** 1. Logon to '[https://portal.azure.com](https://portal.azure.com/)' site with admin account 2. Select Intune 3. Client apps -> Apps

4. Select ADD * Select Store app - Android on App type - Select the 'Select' butto 5. Input detail information * Input Name * Input Description * Input Publisher * Input the following URL in Appstore URL\ * Select Android 4.4 (KitKat) on Minimum operation system * Select Productivity on Category * Select Yes on "***Display this as a featured app in the Company Potal***" * Click on Next button

6. Select a group in Assignments and add it

* Click on Next button 7. Check the configured information and click on the Create button You can see the following screen when signing in Company Portal with the account after completing the above server settings.

### **How to set Configuration** #### ***App Protection Policies*** 1. Login at as an Admin. 2. Select "Intune App Protection" on the left menu. 3. Setting a policy in the App protection policies. 4. Create a policy. * Platform: Select Android * Create "**com.ninefolders.hd3.work.intune**" through "**More apps**" in "**Apps / Select required app**" and set it as checked.

* Input Name and Description and then click on Next button.

* Public apps > Select public apps and Select the 'Nine Work for Intune' and then click on Next button.

* Designate Data Protection and click on Next button

Select a group in Assignments * Assignments >> Include / Select groups to include >> Select the groups including the Intune target users and save them.

5. Check the configured information and click on the Create button #### ***App Configuration Policies***** ** 1. Login with the admin account to the [https://portal.azure.com](https://portal.azure.com/) site. 2. Select Intune App Protection. 3. Select App Configuration Policies. 4. Create Policy>Managed App.

5. Input Name and go to Public Apps > Select public apps and then select the 'Nine Work for Intune'

6. Add AppConfigs and click on Next button

7. Select a group in Assignments. * Assignments >> Include / Select groups to include >> Select the groups including the Intune target users and save them.

8. Check the configured information and click on the Create button ## **Nine Configuration Settings Values** ### **App Service Configuration** **App Service Configuration** allows the application to connect to the appropriate app web services for an organization.

Key	Req.	Example	Default/Description
AppServicePublisher	Y	(e.g. Intune)	Default: Note: This key and value must be specified. Description: MDM service provider (eg. Intune) AppServicePublisher : Intune If these two values are not defined, App Configuration is ignored. Therefore you must specify these key and value. This key and value are a required entry.
AppServiceHost	Y	(e.g. appserver.com)	Default: Note: This key and value must be specified. Description: Hostname used to communicate with the application’s primary server (e.g. myserver.com). The application should implement its own default value. AppServiceHost : outlook.office365.com (User Mail Server Address) If these two values are not defined, App Configuration is ignored. Therefore you must specify these key and value. This key and value are a required entry.
AppServiceSecondaryHost	N	(e.g. appserver.com)	Default: Description: Server address for the subordinate accounts
AppServicePort	N	(e.g. 443)	Default: 443 Description: Port number used to communicate with the application’s primary server (e.g. 443). The application should implement its own default value.
AppServiceUseSSL	N	(e.g. True, False)	Default: True Description: Determines if the application should use SSL when communicating with the applications’ server. The application should implement a default value.
AppServiceSSLTrustAll	N	(e.g. True, False)	Default: True Description: Accept all SSL certificates
AppDeviceIdPrefix	N	(e.g. MSFT, YHOO)	Default: Nine Description: Prefix for distinguishing DeviceID, (4 alphabetic letters)
AppDeviceType	N	(e.g. Android)	Default: Android Description: Device Type
AppUseLoginCertificate	N	(e.g. True, False)	Default: False Description: Client CA
AppUserAgentPrefix	N		Default: Description: Full text which is used in User Agent
AppUserAgent	N	(e.g. Nine, MDM)	Default: Description: App name which is used in User Agent
AppReqParamPlaintext	N	(e.g. True, False)	Default: False Description: "The query value format in the URI contains all of the ActiveSync URI parameters. e.g.) Base64: POST /Microsoft-Server-ActiveSync?jAAJBAp2MTQwRGV2aWNlAApTbWFydFBob25l HTTP/1.1 Plain text: POST /Microsoft-Server- ActiveSync?Cmd=Sync&User=rmjones&DeviceId=v140Device&DeviceType=SmartPhone HTTP/1.1"
AppUseModernAuthentication	N	(e.g. True, False)	Default: FALSE Description:
AppEditableLoginId	N	(e.g. True, False)	Default: FALSE Description: If the value is true, you can edit the login Id field.
AppCustomerServiceEmail	N		Default: support@9folders.com Description:
AppPasswordEnable	N	(e.g, -1, 0, 1)	Default: -1 Description: App password Enable -1 : Use Exchange Policy 0 : Disabled 1 : Enabled
AppPasswordComplexity	N	(e.g. 0, 1)	Default: 0 Description: App password complexity (0 : Simple, 1: Alphanumeric)
AppPasswordMinLength	N	(e.g. 4)	Default: 0 Description: App Password Minimum length
AppPasswordExpirationDays	N	(e.g. 90)	Default: 0 Description: App Password expiration date
AppPasswordHistory	N	(e.g. 9)	Default: 0 Description: App Password History counts
AppPasswordMaxFailed	N	(e.g. 10)	Default: 0 Description: App Password Maximum failure counts
AppPasswordLockTime	N	(e.g. 60)	Default: 0 Description: App Password Maximum Lock Time (Min.)
AppPasswordComplexChar	N	(e.g. 0)	Default: 0 Description: App Password complex characters 0 : none 1,2 : letter + digit 3 : letter + digit + symbol 4 : letter (upper & lower) + digit + symbol
AppLauncherShortcuts	N	[ "Mail", "Calendar", "Contacts", "Tasks", "Notes" ]	Default: Description: eg) Add Calendar and Tasks shortcuts as default. [ "Calendar", "Tasks" ]
AppEWSURL	N		Default: https://outlook.office365.com:443/EWS/Exchange.asmx Description:
AppPreemptivePushScheduling	N	(e.g. -1, 0, 1)	Default: -1 Description: -1: User can select the option 0: Admin disables the option forcibly. User can't change the option. 1: Admin enables the option forcibly. User can't change the option.
AppDefaultCategories	N		Default: [ { "title": "Sales", "color": "#FF44336" }, { "title": "HR", "color": "#00bcd4" }, { "title": "IT", "color": "#009688" } ] Description:
AppSelectiveAuthentication	N	(e.g. True, False)	Default: False Description:

### **User Configuration** \ **User Configuration** allows the application to detect the user of the application, however, does not authenticate the user.

Key	Req.	Example	Default/Description
UserName	N	(e.g.) {{userprincipalname}} or {{username}}	Default: Description: Username of the user who is using the device. Value to be used by the application to authenticate a user. If you want to get to know about UserName and UserEmail, please read carefully below link. Configuration values for using tokens https://docs.microsoft.com/en-us/intune/app-configuration-policies-managed-app#configuration-values-for-using-tokens
UserEmail	N	(e.g.) UserEmail : {{mail}} or {{PrimarySMTPAddress}}	Default: Description: Email address of the user who is using the application
UserDomain	N	(e.g. NADOMAIN)	Default: Description: A domain of the user who is using the application Multiple domains are able to be set with a semicolon. (eg. NADOMAIN1; NADOMAIN2)
UserDisplayName	N	(e.g. James)	Default: Description: User name which is displayed in Nine app
UserSignature	N	(e.g. ABC Company, James, CIO, +4081234567)	Default: Description: Email signature. If empty, use "Sent from Nine"
UserLicenseNumber	N	(e.g. 123456781234)	Default: Description: License key
UserEmailSyncRange	N		Default: Description: 0: All 1: 1 Day 2: 3 days 3: 1 week 4: 2 weeks 5: 1 month
UserEmailDownloadSize	N		Default: Description: 0: All 1: 10KB 2: 20KB 3: 50KB 4: 100KB
UserFontFamily	N	(e.g. Calibri, Arial, Helvetica, sans-serif)	Default: Description: Default font family for outgoing email.
UserFontSize	N	(e.g. 11.5)	Default: Description: Default font size for outgoing email.
UserFontColor	N	(e.g. #000000)	Default: Description: Default font color for outgoing new email.
UserReplyFontColor	N	(e.g. #1F497D)	Default: Description: Default font color for a reply email.
UserInAppCalendarNotification	N	(e.g. True, False)	Default: Description: Calendar notification settings
UserDefaultEditor	N	(e.g. 0, 1)	Default: 0 Description: 0: Rich Text Editor 1: Text Editor
UserContactsFieldsLevel	N		Default: 0 Description: 0: All Fields 1: Minimum Fields (Name Fields, Phone Fields)
UserMessageFormat	N	(eg, 0, 1, 2)	Default: Description: 0: Text format 1: Html format 2: MIME format
UserReFwdSeparatorStyle	N		Default: 1 Description: 0: No separator 1: 1px 2: 2px 3: Outlook 2016
UserAutoAdvance	N		Default: 0 Description: 0: Open the previous item 1: Open the next item 2: Return to the current folder
UserSyncSystemCalendarStorage	N	(e.g. True, False)	Default: FALSE Description: The default value for syncing to the system Calendar storage
UserSyncSystemContactsStorage	N	(e.g. True, False)	Default: FALSE Description: The default value for syncing to the system Contacts storage
UserDownloadableAttachmentsMaxSize	N		Default: 0 Description: xx: xxMB Limited 0 Unlimited (Default) eg) 10: 10MB Limited 25: 25MB Limited
UserFabFrequentRecipients	N	(e.g. True, False)	Default: TRUE Description:
UserFindingContactsStorage	N		Default: 0x1111 Description: 0 : Turn Off all Contacts storage 0x1111: Turn On all Contacts storage 0x0001 : Nine Contacts 0x0010 : All System Contacts 0x0100 : Suggested Contacts 0x1000 : GAL
UserSyncWhenRoaming	N	(e.g. 0, 1)	Default: 0 Description: 0: Off 1: On
EnforceSyncWhenRoaming	N	(e.g. True, False)	Default: FALSE Description:
UserReportDiagnosticInfo	N	(e.g. True, False)	Default: TRUE Description:
UserBiometricUnlock	N	(e.g. True, False)	Default: FALSE Description:
UserNotesTemplate	N		Default: Description: Ex) "UserNotesTemplate": { "Title": "Memo", "Template": "To: \nFrom: \nDate: \nSubject: \n\n" }
UserFavoriteFolders	N		Default: Description:
EnforceExternalBrowsers	N	(e.g. com.microsoft.emmx, com.android.chrome)	Default: "" Description: The package names of the Browser app which is used as the default Browser.

### Policy Configuration

Key	Req.	Example	Default/Description
PolicyMaxEmailLookback	N		Default: Description: Max sync range of the user 0: All 1: 1 Day 2: 3 days 3: 1 week 4: 2 weeks 5: 1 month

### Branding Configuration **Branding Configuration** allows an application to customize the look and feel for a specific organization.

Key	Req.	Example	Default/Description
BrandingLogo	N	(e.g.. http://myserver/image.png)	Default: Description: String representing HTTP URL of the image to download and display as the main wallpaper within the application. Each application could implement the visual representation differently. - Recommend format: PNG (Other formats are applicable) - Background color: #ff009688 - Recommend resolution: 720x264 (Max 1024x1024)
BrandingName	N	(e.g. Company Name)	Default: Description: String representing the company name which could be displayed in the application.
BrandingColor	N	(e.g. #1F497D)	Default: Description: RGB(31, 73, 125)

Key

Req.

Example

Default/Description

BrandingLogo

(e.g.. http://myserver/image.png)

Default:
Description:
String representing HTTP URL of the image to download and display as the main wallpaper within the application. Each application could implement the visual representation differently.

- Recommend format: PNG (Other formats are applicable)

- Background color: #ff009688

- Recommend resolution: 720x264 (Max 1024x1024)

BrandingName

(e.g. Company Name)

Default:
Description: String representing the company name which could be displayed in the application.

BrandingColor

(e.g. #1F497D)

Default:
Description: RGB(31, 73, 125)

### Security (or Custom) Settings **Security (or Custom) Settings** allows an application to enable or disable certain security features

	Req.	Example	Default/Description
AllowEmailSync	N	(e.g. True, False)	Default: TRUE Description: Allow Email sync
AllowCalendarSync	N	(e.g. True, False)	Default: TRUE Description: Allow Calendar sync
AllowContactsSync	N	(e.g. True, False)	Default: TRUE Description: Allow Contacts sync
AllowTasksSync	N	(e.g. True, False)	Default: TRUE Description: Allow Tasks sync
AllowNotesSync	N	(e.g. True, False)	Default: TRUE Description: Allow Notes sync
AllowPrint	N	(e.g. True, False)	Default: TRUE Description: Allow print
AllowShareContents	N	(e.g. True, False)	Default: TRUE Description: Allow to share the contents of Email/Tasks/Notes
AllowShareAttachment	N	(e.g. True, False)	Default: FALSE Description: Allow to share the attachments to 3rd party app
AllowSaveAttachment	N	(e.g. True, False)	Default: FALSE Description: Allow to save attachments into external storage
AllowGalShare	N	(e.g. True, False)	Default: TRUE Description: Allow to deliver the GAL search results to 3rd party app
AllowNotificationPreview	N	(e.g. True, False)	Default: TRUE Description: Allow to display the Email Body snippet on Notification drawer
IgnoreExchangePolicy	N	(e.g. True, False)	Default: FALSE Description: Disregard Exchange Policy. Instead, MDM controls the policy.
AllowSyncSystemCalendarStorage	N	(e.g. True, False)	Default: FALSE Description: Allow for Nine Calendar data to sync to system calendar storage. Users can see Nine Calendar data on the stock Calendar app.
AllowSyncSystemContactsStorage	N	(e.g. True, False)	Default: FALSE Description: Allow for Nine Contacts data to sync to system contacts storage. Users can see Nine Contacts data on the stock Contacts app.
AllowCamera	N	(e.g. True, False)	Default: FALSE Description: Allow to open files from Whitelist apps only
AllowExportMessage	N	(e.g. True, False)	Default: FALSE Description: Allow to export Message
AllowEWSConnectivity	N	(e.g. True, False)	Default: TRUE Description: Allow EWS connectivity for the features such as Shared Calendar features.
AllowBiometricUnlock	N	(e.g. True, False)	Default: TRUE Description: Allow Biometric authentication such as Fingerprint to unlock screen.
AllowManageFolders	N	(e.g. True, False)	Default: TRUE Description: Allow to manage folders such as create, rename, delete
AllowManageCategories	N	(e.g. True, False)	Default: TRUE Description: Allow to manage categories such as create, rename, delete
AllowMultipleAccount	N	(e.g. True, False)	Default: FALSE Description: Allow to set up multiple accounts
AllowWidgetEmail	N	(e.g. True, False)	Default: TRUE Description: Allow to use the Email widget
AllowWidgetCalendarAgenda	N	(e.g. True, False)	Default: TRUE Description: Allow to use the Agenda widget
AllowWidgetCalendarMonth	N	(e.g. True, False)	Default: TRUE Description: Allow to use the MonthView widget
AllowWidgetTasks	N	(e.g. True, False)	Default: TRUE Description: Allow to use the Tasks widget
AllowWidgetBadge	N	(e.g. True, False)	Default: TRUE Description: Allow to use the Badge widget

*** Please download the latest version of Nine Work for Intune - v4.1.9c ![image-text](https://i.ibb.co/WJTv355/downloadapk.png) ``` File hashes: MD5: f441ca3b9efaf141d866c094d061ef22 SHA-1: b3ec2b68ae51d5add5e863e71dcfecfd5e2a8c52 SHA-256: a73346636debf07af4d6bae8e0fe9eac6050d157c78244d88b524ce2868791c4 Verify the file you downloaded is not corrupt and was not tampered with using the file hashes above. ```