Unable to Disable Google Play Protect on Android Device with Intune Company Portal

Question

I am experiencing issues on my Honor Magic 7 Pro related to Google Play Protect and potential restrictions imposed by Intune.

After a recent firmware update, I am facing the following problems:

• I am unable to install APKs manually. The system returns the error:
  "Unknown apps can't be installed by this user."
• I have already enabled “Install unknown apps” permission for the app in question.
• I do not have a work profile set up, but I do have the Intune Company Portal app installed.
• I attempted to uninstall the Company Portal app and cleared its data, yet the issue persists.
• I am unable to disable or bypass Google Play Protect, which may be blocking the APK installation. The option appears to be enforced or locked down.

I suspect there may be a policy enforced via Intune that is restricting installations and Google Play Protect controls, even without a work profile configured.

Could guidance be provided on the following:

• Does Intune enforce Play Protect policies or restrict unknown app installations even without a work profile?
• How can it be verified and removed if there are any residual MDM or device policy controllers from Intune, if applicable?
• Is there a method to disable Play Protect or confirm if its restrictions are MDM-driven?

This issue has directly impacted my workflow, and any assistance would be greatly appreciated.

Device details:

• Model: Honor Magic 7 Pro
• Android Version: 15
• Company Portal Installed: Yes
• Work Profile: No