The Application Control profile allows you to whitelist or blacklist specific applications. While the compliance engine sends alerts and takes administrative actions when a user installs or uninstalls certain applications, Application Control prevents users from even attempting to make those changes.
For example, the AirWatch Agent is automatically pushed to the device as a badge app. Enabling the Prevent Un-Installation of Required Apps option prevents the uninstallation of the AirWatch Agent and other required apps configured in Application Groups. Whitelisting is enabled by default because only an admin can add apps to the Work Profile.
For more information on Application Groups, see Application Groups for more information.