Whitelist Intune

[hugo566788]

Hello,

I wanted to know if a whitelist can be created from Intune, to add the programs that people can install and prevent people from being able to install those that are not on that list.

Thx.

[#2]

Make sure people arent local admin on the device... make sure you publish the company portal to those devices
If you create apps and make them/assign them as available for the users, people could install those apps themselves from the cp

https://call4cloud.nl/2020/11/company-app-unchained/

[#3]

Hello, we do not want to implement the company portal
Since many applications cannot be uploaded and we work with more than 340 applications (mostly .exe) which are difficult to create in the company portal, we have looked at the EPM so any application can be installed with high permissions and justifying it, We want to limit the installation of certain applications, for this we had thought about the white list to include the 340 applications that we have, mostly exe

[#4]

You mentioned the ms solution in your response… if you dont want to use the cp, users need to install those apps on their own.. but using epm to allow 340 apps, that will take you some time to allow every signature… if it are 340 different apps from different vendors 🙂

Are those apps all machine based installers?if you dont have application restriction configured (applocker or wdac) they still canninstall those user based install apps

[#5]

You can block All Apps installation and Whitelist only the ones you want by either using Applocker Rules or WDAC. If you decide to go with Applocker, you could use this: https://cloudinfra.net/how-to-implement-applocker-using-intune/.