Edit

Share via

How to validate your app protection policy setup in Microsoft Intune

  • Article

Validate that your app protection policy is correctly set up and working. This guidance applies to app protection policies in the portal.

Checking for symptoms

Users are unlikely to report issues since app protection is a data protection tool. If there's a problem with the app protection configuration, the user will have unrestricted access, as they would have without app protection, and they wouldn't know there's an issue. For this reason, we recommend you validate your app protection configuration by piloting your app protection policies with a small group of users who can deliberately test the app protection restrictions.

What to check

If testing shows that your app protection policy behavior isn't functioning as expected, check these items:

  • Are the users licensed for app protection?
  • Are the users licensed for Microsoft 365?
  • Is the status of each of the users' app protection apps as expected. The possible statuses for the apps are Checked in and Not checked in.

User app protection status

  1. Sign in to the Microsoft Intune admin center.
  2. Select Apps > Monitor > App protection status, and then select the Assigned users tile.
  3. On the App reporting page, select Select user to bring up a list of users and groups.
  4. Search for and select a user from the list, then choose Select user. At the top of the App reporting pane, you can see whether the user is licensed for app protection. You can also see whether the user has a license for Microsoft 365 and the app status for all of the user's devices.

What to do

Here are the actions to take based on the user status:

  • If the user isn't licensed for app protection, assign an Intune license to the user.
  • If the user isn't licensed for Microsoft 365, get a license for the user.
  • If a user's app is listed as Not checked in, check if you've correctly configured an app protection policy for that app.
  • Ensure that these conditions apply across all users to which you want app protection policies to apply.

See also