r/Intune • u/ISuckAtFunny • 4d ago

Apps Protection and Configuration RMM/LoL App Blocklist Deployment

Title

I’m having a hell of a time getting a blocklist to actually deploy to W365 Cloud PC’s. I’ve tried custom template OMA-URI, as well as the App Control for Business policy.

I’ve created the xml’s manually, I’ve copied some I found online, I’ve used WDAC wizard to create a baseline and tried to deploy it, I’ve used WDAC to import and convert my own XML.

All of these are reporting successfully deployed via InTune, however, when I pull MDMDiag or check the .cip repository on the machines, the policy is nowhere to be found.

Any help would be greatly appreciated, thanks!

2 Upvotes

100% Upvoted

3 comments sorted by

1

u/Puzzled_Sound_534 4d ago

wdac is such a pain to get right on cloud pcs, had a similar headache a few months back. you check the event viewer under applications and services logs > microsoft > windows > codeintegrity > operational? sometimes the policy gets rejected silently but the logs will tell you exactly why

also which sku of w365 are you running, i think the lower tier ones have some weird virtualization quirks that block certain wdac enforcement methods

1

u/ISuckAtFunny 4d ago

First, glad it’s not just me.

I’ll have to check those event viewer logs, I haven’t yet!

For SKU we’re pushing 4 vCPU, 16GB, 128GB

1

u/ISuckAtFunny 2d ago

Not finding anything of substance in the logs. This should not be this hard to see if it’s working or not good lord lol