@AdamGrossTX@IntuneSuppTeam We have an impractical & insecure workaround on COPE:
Assign duplicate policy allowing apps from unknown sources
Download apk file to the phone
Install the app from apk on the device
Switch the policy back
Hope for the best
@SkipToEndpoint Been told by Microsoft that one "master" policy is better than many small ones, processing speed being the main reason.
Any reason to keep settings separate?
@acjuelich It's a massive misconception that you manage Defender policies for Intune devices. In reality Defender policies are visible via Intune.
To answer your question All Devices are all devices.
Need proof? Create Defender policy "in Intune" and check policies visible in Defender
@Scottduf Android compliance policy - if any screen unlock settings are not compliant (type, length, age, history) we see all lines ass not compliant π
On top of that device displays a message about password, so user changes account password, Service Desk change work profile password...