This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I quickly tested App Control and realized I cannot implement it in my enviroment. I removed the assigment of the ASR App Control Policy, but App Control is still on. This is quite funny situation:
It might be, that Application Control cannot be disable by design just by clicking configurations or removing them....
@Pavel yannara Mirochnitchenko You're right. Based on my experience, when you set settings to "Not configured", it will not affect the settings' values. It will keep the previous settings.
If you want to disable the settings, it is suggested to deploy the disable value to these settings via their CSPs.
@Lu Dai-MSFT I already tried that, but ASR App Control doesnt have "Disabled" value, it has "Not Configured" value which does not have any difference. I appreciate if you could point me where else I can find Disable value for App Control.
@Pavel yannara Mirochnitchenko I have done a lot of research. The App Control policy's supported operation is Get. It seems there is no method to disable it via intune.
However, I find an article about clear all AppLocker policies via command:
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/delete-an-applocker-rule#to-clear-applocker-policies-on-a-single-system-or-remote-systems
Hope it will give you some ideas.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 69%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERJ%3C/text%3E%3C/svg%3E)
You can keep the setting in Audit mode. That way no app gets blocked and you can monitor events as well.