This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 78%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERG%3C/text%3E%3C/svg%3E)
I followed [this guided scenario][1] to enable basic Intune app protection on iOS and Android devices. It seems to work on my iPad. However on my Android and iOS phone, I get an error launching apps. It first tries to confirm if I am "clocked in", takes a little bit and then pops up a screen saying the App access is blocked. Any ideas? Why would this work on my iPad but fail on all Android and iOS apps? What is this clock in action it is attempting to make? We do not have any other types of policies set in Endpoint Manager. This is us dabbing our feet with it as we look to increase security with our mobile devices. ![166482-microsoftteams-image-1.png][1] [1]: /api/attachments/166482-microsoftteams-image-1.png?platform=QnA
This is happening to us too. I cannot find any feature to do with 'clocked in' searchable!
If I figure it out, I'll come back here.
The device is in compliance, etc.
grabbed the company portal logs and looking at them
user is m365 business premium licensed.
anonymous user
This is looking like 'Require threat scan on apps' block that causing my issue.
in devices>policy sets (preview)>POLICYNAME properties>Intune App Protection in the conditional launch section, I had to change 'Require threat scan on apps' from BLOCK ACCESS to WARN
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 69%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERJ%3C/text%3E%3C/svg%3E)
Do you have organization wide Shifts policy configured in Teams?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 13%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
anonymous user Thanks for posting in our Q&A forum.
Firstly, I would recommend to double check the configurations, such as Intune license and O365 license have been assigned to the user account.
To for the check-in for the new policies, you can sign out and sign in the apps.
If the apps has been applied the MAM policies from other Intune tenant previously, I would recommend to uninstall the apps, and reinstall them.
The following article can guide you to validate the app protection policy setup in Intune:
https://v4.hkg1.meaqua.org/en-us/mem/intune/apps/app-protection-policies-validate
To take a further investigation, you may need to view the logs by following the guide in the link below:
https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-troubleshooting-intune-app-protection-policy-using/ba-p/330372
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
anonymous user How are things going on? If there is anything update, please feel free to let us know.