App Configuration Policies

The course is part of this learning path

Start course

Publishing Applications With Microsoft Endpoint Manager looks at what's involved when publishing apps to fully managed and BYOD devices. This course examines how to publish and deploy different app types and how to use Microsoft Endpoint manager to implement application configuration and protection. We see what an app needs to support configuration and protection policies, what those policies offer in the way of data protection, and how a policy can configure an app's access to a mobile device's hardware and capabilities. While the course's primary focus is deploying apps to mobile devices through app stores, we also look at using Endpoint manager to publish a custom in-house app to a desktop client.

Learning Objectives

  • Overview of app publishing scenarios
  • Learn about app protection policies and how to create one
  • Learn about app configuration policies and how to create one
  • Publish a custom line of business to a Window client
  • See how to investigate deployment issues

Intended Audience

  • Students working towards the MS-101 Microsoft 365 Mobility and Security exam
  • Those wanting to learn how to use Microsoft Endpoint Manager to publish and deploy applications


  • There are no prerequisite courses needed to take this course

App configuration policies enable you to configure app settings remotely. These settings can be internal to the application, like language or regional settings or permissions related to accessing the device's capabilities. Configuration policies ensure consistent and correct device and app settings across an organization. Even with the best intentions, relying on users to correctly configure apps on devices is seldom going to be one hundred percent consistent.

Only apps that support configuration through the Intune SDK or app wrapping tool can be configured through Microsoft Endpoint Manager. The level of configuration varies from app to app and is determined by the app's developer. Endpoint manager offers two different ways to implement app configuration. You can configure an app in device-managed mode, starting by selecting the devices' platform. From this point, you can configure both application behavior and how the app interacts with the device. 

If you are configuring a store-bought app, so to speak, the app will need to be sourced from the Managed Google play store or associated with an iOS/iPadOS management profile. While app configuration in managed app mode doesn't allow you to configure how the app interacts with the device, you still need to select platform-specific versions of the app. There is a selection of public Microsoft and third-party apps to choose from, or if you have uploaded your own app, it will be selectable under custom apps.

About the Author
Learning Paths

Hallam is a software architect with over 20 years experience across a wide range of industries. He began his software career as a  Delphi/Interbase disciple but changed his allegiance to Microsoft with its deep and broad ecosystem. While Hallam has designed and crafted custom software utilizing web, mobile and desktop technologies, good quality reliable data is the key to a successful solution. The challenge of quickly turning data into useful information for digestion by humans and machines has led Hallam to specialize in database design and process automation. Showing customers how leverage new technology to change and improve their business processes is one of the key drivers keeping Hallam coming back to the keyboard.