Event banner
Event details
What happens if they try to install the app without requesting approval? Are they able to install?
- Carlos Brito
Microsoft
Thanks for the question. They would only be able to install the app if the admin configured a rule that allows that application to install which could be based on file hash or publisher in EPM for example. If the application does not match the rule defined by the administrator, the user would not be able to install the app.
Would that be configured with WDAC?
- Carlos Brito
It is configured through Endpoint Privileged Management in Intune. You can learn more about it here: Learn about using Endpoint Privilege Management with Microsoft Intune | Microsoft Learn
- Joe_Lurie
If the user is an admin on the device, they will be able to install it. If the user is a standard user on the device, they will not be able to install. We have different modes in EPM where you can create a policy to allow it by default, deny it by default, or require support approval. Depending on the policy created, they will not be able to install it until it's approved in Intune. Make sure you watch the Technical Takeoff session on EPM: https://techcommunity.microsoft.com/event/microsoftintuneevents/from-admin-to-standard-user-with-endpoint-privilege-management/4376213
