Application protection policies are still manifesting on users unmanaged phone even after app removal.

Lowe, Troy 0 Reputation points

Application protection policies are still manifesting on users unmanaged phone even after app removal. The users device was not added into any Intune managed device policies. The only policies applied were the application protection policies for the corporate applications the user had installed. The user completed the following steps without success.

 1. The Apple ID being used is the users personal Apple ID and not a corporate ID.  


  1. Uninstalled Outlook and all other corporate applications.


 3. Open Settings -> General -> VPN & Device Management.  Select any and removed any related company related 



 4. Open Settings -> Mail – Accounts and removed and corporate entries that may be listed under this section.  

 5. Removed account from Authenticator application and then uninstalled Authenticator.


 6. Rebooted device.  

The user reinstalled Outlook, and afterwards, still receives the message that the application is being managed by company policy. Users device is not in ABM neither in Intune.

Has anyone else experienced this? Any thoughts other than erasing the phone and starting as if new?

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
2,154 questions
Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
3,987 questions
Azure Active Directory External Identities
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
3,318 questions
{count} votes

1 answer

Sort by: Most helpful
  1. ZhoumingDuan-MSFT 1,090 Reputation points Microsoft Vendor

    @Lowe, Troy, Thanks for posting in Q&A.

    According to your description, I know that you want to know why after deleting the settings related to app protection policy, the app still be applied to app protection policy.

    Based on my researching, it is suggested that you see the log in the targeted device by entering about:intunehelp in Edge to check whether app protection policy is applied.

    Manage Microsoft Edge on iOS and Android with Intune | Microsoft Learn

    Moreover, please check whether conditional access policy is assigned to the user, if yes, the app will also receive the message that the application is being managed by Company policy.

    However, if you do not want app to apply app protection policy, you can unassign it and the app will not apply app protection policy.

    Thanks for your kind understanding.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.