question

MoAlom-8444 avatar image
1 Vote"
MoAlom-8444 asked Crystal-MSFT commented

Intune - "Security policy prevents installation of this application" error for Allowed Apps

Hello Community,

In our organization we use Microsoft Intune to manage our mobile device estate. One of the device configuration policy configured is to enforce device restriction and prevent the installation of all application from google play store unless the app has been allowed.

This has been working fine until a few months ago were we have noticed there have been two applications that will not install on the mobile devices but rest of the applications that are allow have been installing updates fine.

Google Chrome and Android System WebView app. After it downloads the app and tries to install and fails with the following message

"security policy prevents installation of this application".

The apps are definitely whitelisted within the device restriction policy.

Device Platform: Android Device Administrator
Make/Model: Samsung Galaxy A7/A40

Troubleshooting steps:

  1. Configuration Settings > Allow or Block Apps > Apps allowed to be installed (Samsung KNOX Standard only)
    Added the apps by package name, apps by URL, add Store app
    Separately and together

  2. Removed all restriction from the devices - The apps are able to Install

  3. Created a separate policy - no luck

  4. Policies have successfully sync'd and no conflicts

  5. Cleared the google play store cache

  6. As both application are preconfigured on the devices so was only able to uninstall the updates

  7. uninstalled company portal in hope it clears the policies on the device and reinstalled - No luck


Help!!!


Thank you,
Mo

mem-intune-generalmem-intune-device-configurations
· 3
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Crystal-MSFT avatar image Crystal-MSFT ·

@MoAlom-8444, Based on my checking in Google Play Store, I find the two applications Google Chrome and Android System WebView app are not only one app there. Could you add all the app URLs into the Allowed Apps list to see if the result is different?

Also I have done a lot of research, but didn't find other customer has the same issue. Here we suggest to collect company portal log on Android device and open a case with Microsoft to look into the logs to see if there's any finding. Here is a link talking about collecting the company portal on Android for your reference:
https://www.youtube.com/watch?v=JdbVI7KHcFk&list=PLyhj1WZ29G66l3H1lnkSkvsZE035kJujl&index=8
Note: Non-Microsoft link, just for the reference.

0 Votes 0 ·
MoAlom-8444 avatar image MoAlom-8444 Crystal-MSFT ·

"Based on my checking in Google Play Store, I find the two applications Google Chrome and Android System WebView app are not only one app there. Could you add all the app URLs into the Allowed Apps list to see if the result is different"

Can you elaborate more on what i should do? Do Google Chrome and Android System WebView app have more than one URL?

In my allowed apps list i have around 30 apps that have been allowed and all install fine with the exception of the two apps mentioned. Its seems like the security policy does not think these have been allowed even though they have been.

0 Votes 0 ·
Crystal-MSFT avatar image Crystal-MSFT MoAlom-8444 ·

@MoAlom-8444, The URLs are as below. Maybe we can try to add all to see if the result will be different.

Google Chrome
https://play.google.com/store/apps/details?id=com.android.chrome
https://play.google.com/store/apps/details?id=com.chrome.beta
https://play.google.com/store/apps/details?id=com.chrome.dev

Android System WebView
https://play.google.com/store/apps/details?id=com.google.android.webview
https://play.google.com/store/apps/details?id=com.google.android.webview.beta
https://play.google.com/store/apps/details?id=com.google.android.webview.dev

0 Votes 0 ·

0 Answers