I have deployed an app via Endpoint and every time it needs an update it would flag the users that the policy doesn't allow them to do it. I have already set ignore app version to yes.

I have deployed an app via Endpoint and every time it needs an update it would flag the users that the policy doesn't allow them to do it. I have already set ignore app version to yes.

@NoobTech-6889 Thanks for posting in our Q&A.
To clarify this issue, we appreciate your help to collect some information:
1. Is it line-of-business app for the windows 10 device?
2.If yes, based on my research, some MSI installer-based apps are automatically updated by the app developer or another update method. When we set "ignore app version" to "yes", intune will not enforce the app version that's installed on the Windows client, but it only applies to mobile .msi apps.
https://docs.microsoft.com/en-us/mem/intune/apps/lob-apps-windows#configure-a-self-updating-mobile-msi-app-to-ignore-the-version-check-process
It means that what you can do depends on the capability of the msi app. So, did you upload the msi format? Does the msi app allow to be updated automatically?
If there is anything update, feel free to let us know.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@LuDaiMSFT-0289 Thanks for taking time to answer.
It is an LOB app for Win 10 devices. Yes, I have uploaded the MSI format which was supplied by the app developer. How they update their app is something I would need to confirm with them. As a work around I have allowed app update via compliance policy but would rather have the app auto update or possibly whitelist it from the policy in general.
@NoobTech-6889 Thanks for your response.
Could you please clear the workaround that how did you allow app update via compliance policy? I'm interested in it, but I didn't find such settings in compliance policy. Please share more information about it.
Thanks for your kindness in advance.
Hi,
I just configured it so that when the app is asking the user to update, it would open a window asking for admin credentials. It's a workaround ATM. Not really ideal for apps deployed via InTunes.
Thanks!
5 people are following this question.