Forum Discussion
swatijain
Apr 23, 2021Copper Contributor
App Protection Policy is not working when i have Company Portal app is installed and signed in.
Hi Team, In android, I am facing an issue where on my app, App Protection Policy is not working when i have Intune company portal app is installed and signed in. In the app i get the success callba...
- Apr 23, 2021Hi,
App protection could really take some time to apply
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy-delivery#:~:text=Application%20protection%20policy%20delivery%20depends,service%20registration%20for%20your%20users.&text=12%20hours%20%2D%20However%2C%20on%20Android,the%20interval%20is%2024%20hours.
I did some deep dive into app protection policies some weeks ago...sometimes it really took some time before changes in an existing app protection policy applied.
You also could create a conditional access policy to require app protection
Here is the link:
https://call4cloud.nl/2021/03/app-protection-resurgence/
Apr 23, 2021
Hi, it looks like your app protection policy. How did you target the devices? All devices or did you specify specific types?
Because when you signing in in the company portal, you are enrolling your devices so its managed by intune.
If you don't sign in your device is unmanaged
I always create multiple app protection policy to make sure all devices types are protected
swatijain
Apr 23, 2021Copper Contributor
Rudy_Ooms_MVP So what is the right option i shall choose ? so that it applies on both (managed and unmanaged devices). I checked the policy it was "targeted the all devices" and now i tried to target only "Android device administrator" but still facing same issue.
Would appreciate you help here. Thanks.
- Apr 23, 2021Hi
You could simple configure target to apps on all devices types to yes. If it's set to yes... it applies on all device types...- swatijainApr 23, 2021Copper ContributorBut that is not resolving the issue. I have set it to same but still it does not apply to my app.
- sbuccimsftApr 23, 2021
Microsoft
If you aren't enrolling devices, you should not be signing in to the Company Portal. It just needs to be there as a broker for the App Protection policies.