Application Control

Iron Contributor

Hello,

 

Kindly i need to know from where i can monitor the audit mode when i configure application control from intune?

 

Regards,

 

 

4 Replies

Hi @ElieAT,

to monitor audit events for application control in Intune through the Microsoft Intune admin center, follow these steps:

  1. Log in to the Microsoft Intune admin center.
  2. Navigate to Tenant administration > Audit logs.
  3. Refine the results by selecting Filter and using options like Category (e.g., Compliance, Device, Role) and Activity (based on the chosen category).
  4. Click Apply to apply the chosen filters.
  5. Review activity details by selecting an item from the list.

By default, auditing is active for all customers and cannot be turned off.
Users with specific permissions—Global Administrator, Intune Service Administrator, or Administrators assigned to an Intune role with Audit data - Read permissions—can access and review audit logs.

Additionally, audit and operational logs can be directed to Azure Monitor. 

If you're uzing App Control for Business policies in Intune, note that they leverage the Windows ApplicationControl CSP to manage permitted apps on Windows devices.


More info here:
Audit changes and events in Microsoft Intune | Microsoft Learn
Manage approved apps for Windows devices with App Control for Business policy and Managed Installers...

Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.


If the post was useful in other ways, please consider giving it Like.


Kindest regards,


Leon Pavesic
(LinkedIn)

Hello @LeonPavesic,

 

Thank you for your reply i need to know from where i monitor the users applications that are blocked by the policy

 

Regards,

 

 

Hi @ElieAT,

thanks for the update.

You're welcome.

Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.


If the post was useful in other ways, please consider giving it Like.


Kindest regards,


Leon Pavesic
(LinkedIn)

Hello,

Can you help me with what i asked in the second reply? because in your answer its not showing the blocked applications on users

Regards,