How to fix the below error through MS Intune: App is blocked for your Protection

Question

We have a fix, which involves changing the registry value 'Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System, EnableLUA' to 0 or by disabling it. However, how can I push these changes through Intune?

Answer 1

@Raghavendra Prakash, Thanks for posting in Q&A.

I noticed that you have delivered two threads with same issue, and I will post my answer in this thread.

From your description, I know you encountered an issue when you launched an app.

Based on my researching, the error message means that you do not have administrator rights to launch or install an app, and we can create an Intune policy to solve this issue.

Here are the steps you can refer.

1.Go to Intune portal > Click Devices > Click Configuration profiles > Click create new policy.

2.Select Windows 10 and later as Platform, select Settings catalog as Profile type > In Configuration settings page, click Add settings > Search Run All Administrators In Admin Approval Mode and set it Disabled > In Assignment page, assign it to device group.

3.Go to targeted device and sync it > Restart the device.

However, there is no alternative way to run the application without changing the registry settings, because it is a standard user on the device, it cannot perform running or installing app which needs administrator rights.

Hope this can help you, if there is any update, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

**
To fix the "App is blocked for your protection" error through MS Intune:**

1. Check user permissions and ensure administrative rights.
2. Review and adjust app deployment settings in Intune.
3. Verify correct packaging of the app.
4. Ensure the app is digitally signed with a trusted certificate.
5. Check Intune device compliance policies.
6. Adjust Windows Defender SmartScreen settings.
7. Review Group Policy settings on the target device.
8. Check Event Viewer logs for more details.