Disabling "App locker application control" setting

IMK 421 Reputation points
2023-02-17T14:50:40.18+00:00

Hi

We have enabled following setting in Endpoint Manager:

Endpoint Manager -> Endpoint Security -> Attack Surface reduction -> Application control (policy) -> "App locker application control" = Enforce Components, Store Apps, and Smartlocker

If we change this to "Not configured", should it change the setting in devices? Because we are not seeing any change in the device.

How can we get this setting change to actually change the setting in the devices?

Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
370 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,784 questions
Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
908 questions
0 comments
Accepted answer
  1. Simon Ren-MSFT 31,756 Reputation points Microsoft Vendor
    2023-02-21T08:15:17.67+00:00

    Hi,

    Thank you for posting in Microsoft Q&A forum.

    AppLocker CSP behavior will prompt end user to reboot their machine when an AppLocker policy is deployed.

    We can check below policy result to have a try:

    Computer Configuration\Policies\Windows Settings\Security Settings\Application Control Policies\AppLocker

    Thanks for your time. Have a nice day!

    Best regards,

    Simon

    If the response is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rahul Jindal [MVP] 9,551 Reputation points MVP
    2023-02-17T22:28:11.63+00:00

    Yes, it should and will result in a reboot.

    0 comments
  2. IMK 421 Reputation points
    2023-02-18T15:34:39.3233333+00:00

    How can I check that it is disabled?

    0 comments