Prevent end users having the ability to remove iOS apps
From an educational perspective it is critical to be able to stop end users (students!) from deleting apps in iOS when pushed out via VPP Education in Intune.
Every other MDM has this (see screenshot taken from Airwatch).
Can we block the ability to remove apps please!
Intune > Device configuration - Profiles > Create profile > Profile type: Device restrictions > General > Block app removal (supervised only)
Ryan Westbrook commented
This would be great to have as a setting when creating a profile using the wizard.
Bjørn T commented
This is possible with a custom xml created from Apple Configurator 2 (on an mac).
It is the same code as described in another comment here, but you will need the full file.
I am getting an error that "iOS device had rejected the command due to incorrect format".
I have spoken with Microsoft Support team and they said it's not possible.
I have tried the custom policy in intune using <key>allowAppRemoval</key>
<false/> but still no luck and the policy failed.
did anyone tried with custom policy and get successful?
At the moment there is no restriction on app deletion from iPad. end users can easily delete an app from the intune IOS devices.
If this feature will be available then it will give administrators more control on the apps.
Scott Duffey commented
This can be done with a custom configuration policy in Intune. <key>allowAppRemoval</key>