Application Restrictions with Intune
Afternoon, I work for a school and we have started the migration to Intune but come across a sticking point for locking shared windows devices down under exam conditions. We require to prevent a specific exam user account from accessing all applications other than Word and Adobe DC Reader, therefor blocking access to apps such as maps, calculator, Edge, Chrome.... Currently this is achieved using AppLocker via Group Policy and set to apply to an AD user group that contains the exam user account. I have replicated the Applocker policies in Intune but don't see a way to apply these to an EntraID group in the same way as AD groups. The Device Configuration Policy is assigned to the exam user and has applied when logged in to a Shared Windows Device, however if another user logs on to the shared device they are also blocked from using the apps. Is there a way to ensure that only the specific user is restricted when signing in to shared windows devices ? Regards
Applocker CSP updates not working
Hello! We are using applocker via CSP (https://learn.microsoft.com/en-us/windows/client-management/mdm/applocker-csp) and it has been working great for years. But for some reason it resently stoped working with updates. If i publish a new XML the device will ge the XML, I can verify it by looking att the XML files in c:\Windows\system32\AppLocker\MDM\x\x\Applocker\ApplicationLaunchRestrictions\x\ and then the coresponding folder for each type, but it wont apply unit i remove all .policy files in c:\Windows\system32\AppLocker Can anyone help me understand why I need to delete those files in order to get it working?