Event banner
Event details
MicrosoftHi pc-88, no, blocking the running of an app using AppLocker will not prevent it from being provisioned for additional accounts (or installed). Removing apps depends on how exactly they were installed and/or provisioned in the first place. The general common practice that most orgs adopt for removing built-in apps is to run a script after Windows provisioning to remove them or to use Intune to deploy uninstalls for the apps (also after provisioning).
Jason_SandysThanks. Am I correct in understanding that the Windows provisioning process is complete after OOBE is finished, and you've reached the Windows login screen?
- Jason_Sandys
The device portion of the provisioning process is complete, yes, however user provisioning won't happen until the user actually logs in for the first time.
Jason_Sandys I guess I don't fully understand the provisioned vs installed definitions here and I can't quickly find a good reference that explains the difference. Is an app only "provisioned" when there is a Windows provisioning package for it and a user logs in for the first time? Is an app only "installed" when an EXE/MSIX/etc installer is run by a user or an MDM?