question

Jonathan-0803 avatar image
0 Votes"
Jonathan-0803 asked LuDaiMSFT-0289 commented

App Protection Policy Not Being Applied

Hello, I am new to Intune and have been testing an iOS app protection policy for Outlook. I applied this policy several hours ago and it has yet to make it to the test device. When checking the app monitor and searching for the user it shows the status of "Not checked in. On next sync, this app will receive one or more of policies: Outlook Protection based on the management level". Last sync shows "Never". The device shows it has checked in twice since applying this policy but it still is not working. Any assistance would be appreciated.

mem-intune-application-management
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered LuDaiMSFT-0289 commented

@Jonathan-0803 Thanks for posting in our Q&A.

For "Not checked in" status, it means that the app protection policy isn't applied. To clarify this issue, we appreciate your help to collect some information:
1.Please make sure that the app protection policy is applied to a user group and make sure you use the target user to login the Company Portal app.
2.Please sync the device and sign out the target user in Outlook. Then use the target user to sign in Outlook again. Check if the "Not checked in" status is changed.

If there is anything update, feel free to let us know.


If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello. After 24 hours nearly exactly the device has grabbed the updated policies as expected. Is there a way to change this sync time somewhere or is this normal?

0 Votes 0 ·

@Jonathan-0803 Thanks for your update. There is no method to change the sync time. We usually sync the device manually in the Company Portal.

Based on my research, App protection policy delivery depends on the license state and Intune service registration for your users.
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy-delivery#delivery-timing-summary

Based on my experience, if the user has intune license, the device is connected to network and try the action in my last reply. Generally, app protection policy will be applied successfully.

Thanks for understanding.

0 Votes 0 ·
Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered Jonathan-0803 commented

To validate, has the user on the device opened Outlook on the device and signed in to it with their enterprise profile.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Yes, the user is me. I am testing with my own device.

0 Votes 0 ·