Intune - App Configuration Policy - Applied to iOS Edge - Managed Devices - "Not Applicable"

%3CLINGO-SUB%20id%3D%22lingo-sub-2665651%22%20slang%3D%22en-US%22%3EIntune%20-%20App%20Configuration%20Policy%20-%20Applied%20to%20iOS%20Edge%20-%20Managed%20Devices%20-%20%22Not%20Applicable%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2665651%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EWe%20have%20a%20group%20of%20managed%20devices%20where%20we%20are%20attempting%20to%20leverage%20an%20%22App%20Configuration%20Policy%22%20against%20the%20MS%20Edge%20browser.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20intent%20would%20be%20to%20set%20a%20homepage%20and%20ideally%20%22Kiosk%22%20the%20browser%20so%20it%20could%20not%20browse%20outside%20the%20given%20URL...%20Deep%20within%20the%20URL%20would%20be%20required.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20have%20been%20trying%20to%20find%20substantial%20documentation%20with%20setup%20and%20proof%20of%20operation%20on%20a%20managed%20device%20without%20much%20luck.%26nbsp%3B%20I%20have%20utilized%20MS's%20support%20document%3A%3C%2FP%3E%3CP%3E%3CFONT%20size%3D%222%22%3EApp%20configuration%20policies%20for%20Microsoft%20Intune%3C%2FFONT%3E%3C%2FP%3E%3CUL%20class%3D%22metadata%20page-metadata%22%3E%3CLI%3E%3CFONT%20size%3D%222%22%3E07%2F19%2F2021%3C%2FFONT%3E%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%3CBR%20%2F%3EInside%20it%20suggests%3A%3C%2FP%3E%3CP%3ESelecting%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EManaged%20apps%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eas%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EDevice%20Enrollment%20Type%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Especifically%20refers%20to%20apps%20configured%20by%20Intune%20configuration%20policies%20on%20a%20device%20that%20is%20not%20enrolled%20in%20device%20management%2C%20whereas%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EManaged%20devices%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eapplies%20to%20apps%20deployed%20through%20the%20MDM%20channel%20and%20thus%20are%20managed%20by%20Intune.%20Select%20the%20appropriate%20choice%20based%20on%20these%20descriptions.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20enrolled%2Fmanaged%20devices....%26nbsp%3B%20So%20I%20tried%20a%20managed%20device%20policy%20against%20iOS%20Edge.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20end%20result%20seen%20at%20my%20device%20policy%20does%20show%20under%20App%20Configuration%20Policy%20however%20it%20states%3A%3CBR%20%2F%3E%22Not%20Applicable%22.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%3CBR%20%2F%3ECan%20someone%20please%20help%3F%26nbsp%3B%20I%20have%20a%20ticket%20with%20MS%20Support%20as%20well%20its%20proving%20a%20challenge%20all%20around.%3CBR%20%2F%3EThank%20you%2C%3C%2FP%3E%3CP%3ETony.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2665651%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2666766%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20-%20App%20Configuration%20Policy%20-%20Applied%20to%20iOS%20Edge%20-%20Managed%20Devices%20-%20%22Not%20Applicable%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2666766%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102494%22%20target%3D%22_blank%22%3E%40Tony%20Heslington%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAccording%20to%20Microsoft's%20documentation%2C%20you%20can%20only%20use%20the%20Managed%20App%20Configuration%20policy%3A%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E%3CEM%3EEdge%20for%20iOS%20and%20Android%20offers%20administrators%20the%20ability%20to%20customize%20the%20default%20configuration%20for%20several%20in-app%20settings.%20This%20capability%20is%20currently%20only%20offered%20when%20Edge%20for%20iOS%20and%20Android%20has%20an%20Intune%20App%20Protection%20Policy%20applied%20to%20the%20work%20or%20school%20account%20that%20is%20signed%20into%20the%20app%20and%20the%20policy%20settings%20are%20delivered%20%3CSTRONG%3Eonly%20through%20a%20managed%20apps%20App%20Configuration%20Policy%3C%2FSTRONG%3E.%3C%2FEM%3E%3C%2FP%3E%3CP%3ESource%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fapps%2Fmanage-microsoft-edge%23general-app-configuration-scenarios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EManage%20Edge%20for%20iOS%20and%20Android%20with%20Intune%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hello,


We have a group of managed devices where we are attempting to leverage an "App Configuration Policy" against the MS Edge browser. 

 

The intent would be to set a homepage and ideally "Kiosk" the browser so it could not browse outside the given URL... Deep within the URL would be required.

I have been trying to find substantial documentation with setup and proof of operation on a managed device without much luck.  I have utilized MS's support document:

App configuration policies for Microsoft Intune


Inside it suggests:

Selecting Managed apps as the Device Enrollment Type specifically refers to apps configured by Intune configuration policies on a device that is not enrolled in device management, whereas Managed devices applies to apps deployed through the MDM channel and thus are managed by Intune. Select the appropriate choice based on these descriptions.

 

We have enrolled/managed devices....  So I tried a managed device policy against iOS Edge.

 

The end result seen at my device policy does show under App Configuration Policy however it states:
"Not Applicable".


Can someone please help?  I have a ticket with MS Support as well its proving a challenge all around.
Thank you,

Tony.

3 Replies

@Tony Heslington 

 

According to Microsoft's documentation, you can only use the Managed App Configuration policy:


Edge for iOS and Android offers administrators the ability to customize the default configuration for several in-app settings. This capability is currently only offered when Edge for iOS and Android has an Intune App Protection Policy applied to the work or school account that is signed into the app and the policy settings are delivered only through a managed apps App Configuration Policy.

Source: Manage Edge for iOS and Android with Intune | Microsoft Docs

Hello,

FWIW I was able to get the Managed Device policy to apply status states "Succeeded".

 

I can confirm both an the app configuration policy and app protection policy is applied to my user account.  


That I can tell the issue was either or both of the following.  The Edge installed on my iOS device may have been from the Apple store and not the VPP/Apple Business Manager version from Intune Comp Portal.   Or.  Edge was not added to the App protection policy.
(I think most like VPP\ABM based on status changing time frame.)

At this point however.... The policy appears not to be making any modifications to the browser settings. Working with MS support. Will advise.

 

Thank you,
Tony

I had the same issue with edge and the managed app protection policy like i am describing in this blog
https://call4cloud.nl/2021/03/the-chronicles-of-mam/

But what kind of settings are not working with the correct app protection applied?