Forum Discussion

4 Replies

  • LeonPavesic's avatar
    LeonPavesic
    Silver Contributor

    Hi ElieAT,

    to monitor audit events for application control in Intune through the Microsoft Intune admin center, follow these steps:

    1. Log in to the Microsoft Intune admin center.
    2. Navigate to Tenant administration > Audit logs.
    3. Refine the results by selecting Filter and using options like Category (e.g., Compliance, Device, Role) and Activity (based on the chosen category).
    4. Click Apply to apply the chosen filters.
    5. Review activity details by selecting an item from the list.

    By default, auditing is active for all customers and cannot be turned off.
    Users with specific permissions—Global Administrator, Intune Service Administrator, or Administrators assigned to an Intune role with Audit data - Read permissions—can access and review audit logs.

    Additionally, audit and operational logs can be directed to Azure Monitor. 

    If you're uzing App Control for Business policies in Intune, note that they leverage the Windows ApplicationControl CSP to manage permitted apps on Windows devices.


    More info here:
    Audit changes and events in Microsoft Intune | Microsoft Learn
    Manage approved apps for Windows devices with App Control for Business policy and Managed Installers in Microsoft Intune | Microsoft Learn

    Please click Mark as Best Response & Like if my post helped you to solve your issue.
    This will help others to find the correct solution easily. It also closes the item.


    If the post was useful in other ways, please consider giving it Like.


    Kindest regards,


    Leon Pavesic
    (LinkedIn)

    • ElieAT's avatar
      ElieAT
      Iron Contributor

      Hello LeonPavesic,

       

      Thank you for your reply i need to know from where i monitor the users applications that are blocked by the policy

       

      Regards,

       

       

      • LeonPavesic's avatar
        LeonPavesic
        Silver Contributor

        Hi ElieAT,

        thanks for the update.

        You're welcome.

        Please click Mark as Best Response & Like if my post helped you to solve your issue.
        This will help others to find the correct solution easily. It also closes the item.


        If the post was useful in other ways, please consider giving it Like.


        Kindest regards,


        Leon Pavesic
        (LinkedIn)

Resources