使用自訂原則來允許和封鎖 Microsoft Intune 中 Samsung KNOX Standard 裝置的應用程式Use custom policies to allow and block apps for Samsung KNOX Standard devices in Microsoft Intune

適用對象:Azure 入口網站的 IntuneApplies to: Intune in the Azure portal
您需要傳統入口網站的 Intune 相關文件嗎?Looking for documentation about Intune in the classic portal? 請移至這裡Go here.

使用本主題中的程序,建立 Microsoft Intune 的自訂原則,該原則會建立下列其中一項項目︰Use the procedures in this topic to create a Microsoft Intune custom policy that creates one of the following:

  • 無法在裝置上執行的應用程式清單。A list of apps that are blocked from running on the device. 這份清單中的應用程式會被封鎖而無法執行,即使它們在套用原則時已安裝也一樣。Apps in this list are blocked from being run, even if they were already installed when the policy was applied.
  • 裝置使用者可從 Google Play 市集安裝的應用程式清單。A list of apps that users of the device are allowed to install from the Google Play store. 只可以安裝您列出的應用程式。Only the apps you list can be installed. 無法從市集安裝其他應用程式。No other apps can be installed from the store.

只有執行 Samsung KNOX Standard 的裝置可使用這些設定。These settings can only be used by devices that run Samsung KNOX Standard.

建立已允許或已封鎖的應用程式清單Create an allowed or blocked app list

  1. 登入 Azure 入口網站。Sign into the Azure portal.
  2. 選擇 [更多服務] > [監視 + 管理] > [Intune]。Choose More Services > Monitoring + Management > Intune.
  3. 在 [Intune] 刀鋒視窗中,選擇 [裝置設定]。On the Intune blade, choose Device configuration.
  4. 在 [裝置設定] 刀鋒視窗中,選擇 [管理] > [設定檔]。On the Device Configuration blade, choose Manage > Profiles.
  5. 在設定檔刀鋒視窗清單中,選擇 [建立設定檔]。In the list of profiles blade, choose Create Profile.
  6. 在 [建立設定檔] 刀鋒視窗中,為此裝置設定檔輸入 [名稱] 以及選用 [描述]。On the Create Profile blade, enter a Name and optional Description for this device profile.
  7. 將 [平台類型] 選為 Android,且將設定檔類型選為 [自訂]。Choose a Platform type of Android, and a Profile type of Custom.
  8. 按一下 [設定]。Click Settings.
  9. 在 [自訂 OMA URI 設定] 刀鋒視窗中,選擇 [新增]。On the Custom OMA-URI Settings blade, choose Add.
  10. 在 [新增或編輯 OMA-URI 設定] 對話方塊中,指定下列資訊:In the Add or Edit OMA-URI Setting dialog box, specify the following:

無法在裝置上執行的應用程式清單:For a list of apps that are blocked from running on the device:

  • 名稱 - 輸入 PreventStartPackagesName - Enter PreventStartPackages.
  • 描述 - 輸入選用描述,例如「封鎖而無法執行的應用程式清單」。Description - Enter an optional description like 'List of apps that are blocked from running.'
  • 資料類型 - 從下拉式清單中選擇 [字串]。Data type - From the drop-down list, choose String.
  • OMA URI - 輸入 ./Vendor/MSFT/PolicyManager/My/ApplicationManagement/PreventStartPackagesOMA-URI - Enter ./Vendor/MSFT/PolicyManager/My/ApplicationManagement/PreventStartPackages
  • - 輸入您允許的應用程式套件名稱之清單。Value - Enter a list of the app package names you want to allow. 您可以使用 ; : ,| 作為分隔符號。You can use ; : , or | as a delimiter. (範例︰package1;package2;)(Example: package1;package2;)

針對使用者在排除所有其他應用程式時,可從 Google Play 商店安裝的應用程式清單:For a list of apps that users are allowed to install from the Google Play store while excluding all other apps:

  • 名稱 - 輸入 AllowInstallPackagesName - Enter AllowInstallPackages.
  • 描述 - 輸入選用描述,例如「使用者可從 Google Play 安裝的應用程式清單」。Description - Enter an optional description like 'List of apps that users can install from Google Play.'
  • 資料類型 - 從下拉式清單中選擇 [字串]。Data type - From the drop-down list, choose String.
  • OMA URI - 輸入 ./Vendor/MSFT/PolicyManager/My/ApplicationManagement/AllowInstallPackagesOMA-URI - Enter ./Vendor/MSFT/PolicyManager/My/ApplicationManagement/AllowInstallPackages
  • - 輸入您允許的應用程式套件名稱之清單。Value - Enter a list of the app package names you want to allow. 您可以使用 ; : ,| 作為分隔符號。You can use ; : , or | as a delimiter. (範例︰package1;package2;)(Example: package1;package2;)
  1. 按一下 [確定],然後在 [建立設定檔] 刀鋒視窗中,選擇 [建立]。Click OK, and then, on the Create Profile blade, choose Create.
提示

您可以藉由瀏覽至 Google Play 商店上的應用程式,找到應用程式的套件識別碼。You can find the package ID of an app by browsing to the app on the Google Play store. 套件識別碼被包含在應用程式頁面的 URL 中。The package ID is contained in the URL of the app's page. 例如,Microsoft Word 應用程式的套件識別碼為 com.microsoft.office.wordFor example, the package ID of the Microsoft Word app is com.microsoft.office.word.

下一次,登入每個目標裝置後,就會套用應用程式設定。The next time each targeted device checks in, the app settings will be applied.