Search for the app to be uninstalled and click Select.Add the app to be uninstalled as an iOS store app by selecting + Add and choosing the iOS store app from the list.Ī screenshot of the Select app type window with the iOS store app highlighted.Assign the policy to either a device or user group.Īpps that a user has installed on a supervised iOS or iPadOS device via the Apple App Store can be easily uninstalled via Intune.Close the Setting picker window and then enter the specific app bundle ID to be blocked.Ī screenshot of the Settings picker showing the Restrictions category and the Blocked App Bundle IDs setting selection.Ī screenshot of the Restrictions category Blocked App Bundle IDs option. On the Configuration settings tab, select Add settings and search for “Blocked App Bundle IDs.” Select the Restrictions category and then click the checkbox next to the Blocked App Bundle IDs setting.( Devices > iOS/iPadOS > Configuration profiles). Create a new device configuration profile and select Settings Catalog for the profile type.To hide and prevent the launch of specific apps: Note, this profile must be assigned to a user group.Ī screenshot of the expanded Restricted Apps option for the Device restrictions profile.ĭevices with the restricted app installed will be displayed under the Devices with restricted apps report ( Devices > Monitor > Devices with restricted apps).Īdmins can both hide and prevent the launch of specific apps by using the settings catalog. Then add the App store URL, App bundle ID, App name, and Publisher. On the Configuration settings tab, expand the Restricted Apps option and change the Type of restricted apps list to Prohibited Apps. ![]() Specify restricted apps by navigating to Devices > iOS/iPadOS > Configuration Profiles > Create profile, select Templates for the Profile type and choose Device restrictions from the list. Intune provides a report ( Devices > Monitor > Devices with restricted apps) that displays devices that have installed restricted apps. For additional details on the discovery cycle, see Intune discovered apps.Ī screenshot showing the Discovered apps with OneDrive highlighted.Īdmins can then click on a discovered app to see which devices have the app installed.Ī screenshot showing information about the device that has the discovered app on it. This data is refreshed every seven days for supervised devices, starting from the date that the device was enrolled. The following sections cover how Intune admins can discover, hide, and block the launch of restricted apps on corporate-owned supervised iOS/iPadOS devices.Īdmins can determine which apps are installed on supervised iOS/iPadOS devices by navigating to the Discovered apps report in the Microsoft Intune admin center ( Apps > Monitor > Discovered apps). If your organization has not blocked access to the Apple App Store on corporate-owned iOS/iPadOS devices, then users will be able to sign in with a personal Apple ID and download any app available in the Store. If the admin blocks access to the Apple App Store, no additional configuration or action is required. ![]() If your organization has enabled this policy, any user of the device will be unable to access and install any unmanaged applications other than those made available by the Intune admin through the Intune Company Portal app. ![]() Intune gives admins the ability to block access to the Apple App Store on corporate-owned supervised devices. To make use of specific device management APIs required for the example outlined below, the device is required to be Supervised. IOS and iPadOS devices that have been enrolled into Intune using Apple Business Manager via their Automated Device Enrollment (ADE) method are Supervised devices. This section covers corporate-owned and personally owned (BYOD) iOS/iPadOS devices. While the examples used in this article will be focused on the Microsoft OneDrive app, you can apply these steps to any app available in either the Apple App Store or Google Play Store. We wanted to provide a comprehensive guide for Microsoft Intune admins on the options available to block and remove specific, non-approved applications on both corporate-owned and personally owned (BYOD) iOS/iPadOS and Android devices. By: Michael Dineen - Sr Product Manager | Microsoft Intune
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |