Forum Discussion
How to use Intune manager uninstall Windows mail app
Try to use MDAC/WDAC instead of Applocker
if you still want to try with Applocker then model the policy via GUI using the secpol.msc then export the policy to XML and open the XML with VS Code and take a look at the XML structure.
Thanks for getting back with a diff method. I will check out the link and read thru later. Can I check with you, how to make it only block mail app? The reason why is because of I've managed to block the mail app but also blocking the sticky note and Company portal.
OMA-URI: ./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/Grouping/StoreApps/Policy
String value:
<RuleCollection Type="Appx" EnforcementMode="Enabled">
<FilePublisherRule Id="516ca83f-ea5f-43f2-82de-643153669ae8" Name="microsoft.windowscommunicationsapps, version 16005.14326.0.0 and above, from Microsoft Corporation" Description="" UserOrGroupSid="S-1-1-0" Action="Deny">
<Conditions>
<FilePublisherCondition PublisherName="CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" ProductName="microsoft.windowscommunicationsapps" BinaryName="*">
<BinaryVersionRange LowSection="16005.14326.0.0" HighSection="*" />
</FilePublisherCondition>
</Conditions>
</FilePublisherRule>
</RuleCollection>
Sindhu2265Microsoft
Could you please share details on how you managed to uninstall it as I do not see an option for it once I have assigned the app.
- Applocker and restricting the mail app is indeed difficult as it also blocks some other apps like the company portal indeed. We are also using applocker to restrict the store but that mail app... we use the uninstall to make sure its gone 🙂
Sk-73 yeah I just noticed the same behavior where Stickynotes and Company Portal were also impacted by the policy which is a bizarre thing.
I would try then with alternative methods like MDAC/WDAC or the Uninstall option or both as it seems the Applocker method would require more testing at this point.
