Skip to content

[Doc] No document related to enterprise policy enforcement for local sandbox #3884

New issue
New issue
Closed
Bug
Closed
[Doc] No document related to enterprise policy enforcement for local sandbox#3884
Bug
Labels
area:enterpriseGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settingsarea:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions

Description

@SLdragon
SLdragon
opened on Jun 22, 2026

Describe the bug

In sandbox document, there is only a description that local sandbox can be managed by Microsoft Intune or MDM, however, there is no detailed information about how enterprise user can config and use it:

Enterprise policy enforcement
For organizations and enterprises, local sandbox policies can be centrally configured and enforced using Microsoft Intune and other MDM (mobile device management) platforms. This gives administrators control over how Copilot interacts with local resources across managed devices.

Affected version

No response

Steps to reproduce the behavior

No response

Expected behavior

No response

Additional context

No response

Activity

  1. SLdragon
    added
    triage
    on Jun 22, 2026
  2. SLdragon
    added the
    Bug
    issue type on Jun 22, 2026
  3. examon
    added
    area:enterpriseGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settings
    area:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions
    on Jun 22, 2026
  4. github-actions
    removed
    triage
    on Jun 22, 2026

  5. caarlos0 commented on Nov 7, 2026

    @caarlos0
    caarlos0
    on Nov 7, 2026
    Member

    The documentation gap is now resolved in the published documentation:

    • The original article's Enterprise policy enforcement section now links to the enterprise-managed settings guide.
    • Deploying MDM-managed settings documents Windows registry and macOS managed-preference locations, dot-separated policy keys, native string/JSON representation, device-group deployment, and refresh behavior. The same page covers file-based delivery and policy precedence.
    • The sandbox policy reference documents required enforcement, failIfUnavailable, bypass restrictions, filesystem/network settings, and local MCP/LSP sandboxing.

    Closing as completed because the missing enterprise configuration documentation is now available. No additional runtime change is needed to resolve this documentation report.

  6. caarlos0
    closed this as completedon Nov 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:enterpriseGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settingsarea:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions

    Type

    Bug

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions