Apr 13 2022 07:21 PM
Dear all,
As per subject, does anyone have done this before?
Will be grateful for any help you can provide.
Thanks.
Apr 13 2022 10:25 PM - edited Apr 13 2022 10:25 PM
Hi... thats easy Just make sure you add the microsoft store for business to Intune... ... open the Microsoft store for business... search for that Mail app... add it... Back in intune add the app but instead of requiring the app select uninstall... job done 🙂 Sune is describing it here also https://blog.mindcore.dk/2021/05/remove-windows-10-built-in-apps-with.html
Apr 14 2022 11:54 PM
Thanks, @Rudy_Ooms_MVP My organization is disabled. I have sent an email to the relevant team to ask for permission to enable it before taking any further action.
Apr 15 2022 03:58 AM
@Sk-73 yeah users tend to click on the mail app instead of the Outlook. I would avoid removing native apps though not to break any basic functionality. I would instead prevent the users from using the app via CA policies or Applock. With some user Ed I always get them to use the browser for non work related mail accounts.
Plus MS is retiring MS store for business.
Apr 15 2022 04:09 AM
Hi,@aollivierre305 Thanks for replying this post. The reason why we need to remove is because to preventing user self adding not org email acc on corp laptop.
Do u have a diff way to achieve this?
Apr 15 2022 04:50 AM
Apr 17 2022 10:24 AM - edited Apr 17 2022 10:30 AM
Applocker CSP here PRICESLY that (instead of uninstalling you DENY access)
https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-using-applocker-to-create...
that article was from 2019 so here is the updated OMA-URI node and XML parts to use instead of the ones mentioned in the article but beside that follow everything in that article. You DO NOT need to start the App Identity service as it will automatically start (even though by default it is stopped and set to manual)
OMA-URI (CASE SENSITIVE) ./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/Grouping/StoreApps/Policy
XML part to use a string value
<RuleCollection Type="Appx" EnforcementMode="Enabled">
<FilePublisherRule Id="c3d7f207-377d-4512-bb18-d41c86063d54" Name="microsoft.windowscommunicationsapps, version 16005.14326.0.0 and above, from Microsoft Corporation" Description="" UserOrGroupSid="S-1-1-0" Action="Deny">
<Conditions>
<FilePublisherCondition PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" ProductName="microsoft.windowscommunicationsapps" BinaryName="*">
<BinaryVersionRange LowSection="16005.14326.0.0" HighSection="*" />
</FilePublisherCondition>
</Conditions>
</FilePublisherRule>
</RuleCollection>
Apr 17 2022 09:35 PM
Hey @aollivierre305 Thanks! I have just follow the instruction and created a configuration profile assign it to my self. I will update u again.
Apr 18 2022 07:08 PM
Hi @aollivierre305 Yesterday, I tried but not successful. Can I check with you, about the Mail app GUID?
I follow the guide and self export the Deny policy, and I notice the the GUID is diff. Please see the below attached. Wondering to know does this caused policy failed?
Will be grateful for any advice you provide.
Apr 18 2022 07:28 PM
Hi, @aollivierre305 I just change the GUID, the reason why I change is because of now the sticky note and Company portal couldn't launch.
Let's see how it goes.
Apr 18 2022 07:43 PM
Apr 18 2022 08:33 PM
Thanks for getting back with a diff method. I will check out the link and read thru later. Can I check with you, how to make it only block mail app? The reason why is because of I've managed to block the mail app but also blocking the sticky note and Company portal.
OMA-URI: ./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/Grouping/StoreApps/Policy
String value:
<RuleCollection Type="Appx" EnforcementMode="Enabled">
<FilePublisherRule Id="516ca83f-ea5f-43f2-82de-643153669ae8" Name="microsoft.windowscommunicationsapps, version 16005.14326.0.0 and above, from Microsoft Corporation" Description="" UserOrGroupSid="S-1-1-0" Action="Deny">
<Conditions>
<FilePublisherCondition PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" ProductName="microsoft.windowscommunicationsapps" BinaryName="*">
<BinaryVersionRange LowSection="16005.14326.0.0" HighSection="*" />
</FilePublisherCondition>
</Conditions>
</FilePublisherRule>
</RuleCollection>
Apr 19 2022 07:40 AM
@Sk-73 yeah I just noticed the same behavior where Stickynotes and Company Portal were also impacted by the policy which is a bizarre thing.
I would try then with alternative methods like MDAC/WDAC or the Uninstall option or both as it seems the Applocker method would require more testing at this point.
Apr 19 2022 10:12 PM
Oct 14 2022 01:28 AM
Could you please share details on how you managed to uninstall it as I do not see an option for it once I have assigned the app.
Nov 23 2022 05:39 AM