App Control Policy

karthik palani 661 Reputation points
2025-09-03T13:20:43.86+00:00

Hi All,

I want to block the Outlook built-in app (Mail Native), using app locker policy via Intune. Should i use app control wizard and block olk.exe. Any suggestions please.

Also i created "trusted apps from managed installer" app control policy in Intune. If i create Fortinet package and deploy to users, its blocked by app control policy, is there any reason since we set to trust managed installer.

Please advice

Microsoft Security | Intune | Application management
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Prathista Ilango 670 Reputation points Microsoft Employee
    2025-11-20T11:29:05.4866667+00:00

    Hello karthik palani,

    Hope you got this sorted out. If not, here are some pointers to your queries,

    1. Block Outlook App - using App Control Policy Are we trying to block the old outlook app or the new Outlook for Windows? Reason behind this question: the package/publisher (PFN) details differ for both. Suggestion is to deny by packaged app rather than the file itself, considering app updates. You might have to create a custom policy with xml to achieve this. Refer to: Manage approved apps for Windows devices with App Control for Business policy and Managed Installers in Microsoft Intune - Microsoft Intune | Microsoft Learn
    2. Trust managed Installer issue The below are the prerequisites:
      1. Configure IME (Intune Management Extension) as the managed installer.
      2. App is deployed from Intune and installed via IME
      Refer to: https://learn.microsoft.com/en-us/intune/intune-service/protect/endpoint-security-app-control-policy#get-started-with-managed-installers

    Hope this helps!

    If you found the information above helpful, please Click Yes. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.