Forum Discussion
Solved
Verify software is installed compliant
Hello all Can we use Intune to create a policy that requires certain software like zscaler, cylance and rapid7 to be installed to be compliant ? and then create a CA policy to block any device th...
Hi. Yes you can use custom compliance (in preview) against device compliance. https://docs.microsoft.com/en-us/mem/intune/protect/compliance-use-custom-settings
Note sure if you can add all the apps unless you have SSO for these apps and if you can see them in Azure as an app then you can create a conditional access base on these applications the device will be compliant and access requires otherwise it will be blocked.
Again the starting point is you should be able to see your apps on Azure like not the apps created on intune to be pushed but the Azure apps for SSO or Access.
Than go to Azure > Azure Active Directory > Enterprise Applications > Conditional Access
here you will create a new Policy Select the Cloud Apps, give conditions, and then access control.
I suggest trying this on a test environment as it might Mess with your production and let me know how your testing goes.
Again the starting point is you should be able to see your apps on Azure like not the apps created on intune to be pushed but the Azure apps for SSO or Access.
Than go to Azure > Azure Active Directory > Enterprise Applications > Conditional Access
here you will create a new Policy Select the Cloud Apps, give conditions, and then access control.
I suggest trying this on a test environment as it might Mess with your production and let me know how your testing goes.