Forum Discussion
ElieAT
Dec 13, 2023Iron Contributor
Application Control
Hello,
Kindly i need to know from where i can monitor the audit mode when i configure application control from intune?
Regards,
4 Replies
Sort By
- LeonPavesicSilver Contributor
Hi ElieAT,
to monitor audit events for application control in Intune through the Microsoft Intune admin center, follow these steps:
- Log in to the Microsoft Intune admin center.
- Navigate to Tenant administration > Audit logs.
- Refine the results by selecting Filter and using options like Category (e.g., Compliance, Device, Role) and Activity (based on the chosen category).
- Click Apply to apply the chosen filters.
- Review activity details by selecting an item from the list.
By default, auditing is active for all customers and cannot be turned off.
Users with specific permissions—Global Administrator, Intune Service Administrator, or Administrators assigned to an Intune role with Audit data - Read permissions—can access and review audit logs.Additionally, audit and operational logs can be directed to Azure Monitor.
If you're uzing App Control for Business policies in Intune, note that they leverage the Windows ApplicationControl CSP to manage permitted apps on Windows devices.
More info here:
Audit changes and events in Microsoft Intune | Microsoft Learn
Manage approved apps for Windows devices with App Control for Business policy and Managed Installers in Microsoft Intune | Microsoft LearnPlease click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.If the post was useful in other ways, please consider giving it Like.
Kindest regards,
Leon Pavesic
(LinkedIn)- ElieATIron Contributor
Hello LeonPavesic,
Thank you for your reply i need to know from where i monitor the users applications that are blocked by the policy
Regards,
- LeonPavesicSilver Contributor
Hi ElieAT,
thanks for the update.
You're welcome.Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.If the post was useful in other ways, please consider giving it Like.
Kindest regards,
Leon Pavesic
(LinkedIn)