Skip to content

Enterprise Mobility + Security


Unwanted applications such as those preinstalled on some devices can be a cause of concern for customers managing corporate-owned devices. Also, some organizations need to have specific control over which applications can be installed on their devices from public app stores. The August update of Intune brings some important enhancements to app management on iOS 9.3 and Samsung KNOX devices that give you even more control of the apps users can access on their devices.

Hidden and shown apps for iOS 9.3 (or later)

There are two new ways to manage and control which apps your users have access to on their supervised iOS 9.3 or later devices. Now you can use the hidden and shown apps list in the iOS general configuration policy to specify which apps users can view and launch, and which are hidden on their devices. The apps you can specify include both apps you have deployed, and the built-in iOS apps like Messages and Notes.

  • Apps that are specified as hidden can’t be viewed or launched by users.
  • When you specify a list of apps to be shown, no other apps can be viewed or launched.

For more details, see iOS policy settings in Microsoft Intune.

Allowed and blocked apps custom policy for Samsung KNOX devices

The Samsung KNOX improvements also allow you to configure custom policies that let you block or allow specific apps on these devices.

  • Once an app is blocked, it cannot be activated or run on the device, even if it is already installed.
  • Specifying which apps are allowed designates which apps can be installed from the Google Play store. When a list of allowed apps is defined, no other apps can be installed from the store.

For more details, see Use custom policies to allow and block apps for Samsung KNOX devices.

Visit the What’s New in Microsoft Intune page for more on these and other recent developments in Intune.

Additional resources: