Unfortunately, in this case there isnt a convenient COM object you can use to access the information you need. Thus, you possess nearly the same control of applications for MDM-enrolled devices as you would for on-premises, domain-joined devices.Problem: After removing the AppLocker rules, the W10 blocks modern applications.The AppLocker entries are part of a GPO. Third, you can import any AppLocker policy into Intune as an XML file. Most Windows administrators are already familiar with Group Policy, which makes AppLocker user experience seamless and natural.

This functional addition does not apply exactly like the other EXE / DLL / Script / MSI components. Configure the rest (75) of the clients to use enforced mode.The AppLocker component handles modern applications (APPX). Configure about 25 of the clients to use enforced mode and create a PANIC policy. Teach ServiceDesk to deal with AppLocker and inform users. Tweak the rules based on the logged events.

By the way, next time test these policies in a controlled. After the policy is applied to Windows 10 workstation, Start button will work again. Right-Click Packaged App Rules and select Create Default Rules. Go to Computer Configuration / Policies / Windows Settings / Security Settings / Application Control Policies / Applocker. Intune configure applocker.1. Remove xbox from windows 10 gpo.

Windows 10 Applocker Gpo