Internal applications are often developed to perform enterprise-specific tasks. Abrupt removal of these applications can cause frustration and halt work. You can prevent the removal of important internal applications, by using the application removal protection. Application Removal Protection ensures that the system does not remove business-critical applications unless approved by the admin and holds the app removal commands based on the threshold values.
- Navigate to .
- Enter the following threshold settings:
Setting Description Devices Affected Enter the maximum number of devices that can lose a critical application before the loss hinders the work of the enterprise. Within (minutes) Enter the maximum number of minutes that the system sends removal commands before the loss of a critical application hinders devices from performing business tasks. Email Template Select an email notification template and make customizations. The system includes the App Remove Limit Reached Notification template, which is specific to the app removal protection. Send Email to Enter email addresses to receive notifications about held removal commands so that the recipients can take actions in the app removal log.
- Save the settings.
Review App Removal log to act on the held App Removal Commands
You can use the App Removal Log page to continue to hold application removal commands, dismiss commands, or release the commands to devices. The command status in the console displays the application removal log that represents a phase of the protection process until an admin acts on the held commands, the system does not remove internal applications.
Complete the following steps to review the App Removal log to act on the held App Removal Commands:
- Navigate to Resources > Apps > Settings > App Removal Log.
- Filter, sort, or browse to select data.
- Filter results by Command Status list applications.
- Sort by Bundle ID to select data.
- Select an application.
- You can select the Impacted Device Count link to browse the list of devices affected by actions. This action displays the App Removal Log Devices page that lists the device name of the devices. You can use the device name to navigate to the devices' Details View.
Table 1. Descriptions and Causes for Statuses in Application Removal Protection Status Description Cause Held for approval The protection system holds removal commands, and the system does not remove the associated internal application.
The removal commands are in the command queue but the system cannot process them without admin approval.
The system holds removal commands because the threshold values were met. Released to device The protection system sent the commands to remove applicable internal applications off devices. The system released the commands because an admin configured the release. Dismissed by admin The protection system purged the removal commands from the command queue.
The system did not remove applicable internal applications off devices.
The system purged the commands because an admin configured the dismissal.
- You can select Release or Dismiss.
- The Release option sends the commands to devices and the system removes the internal application off devices.
- The Dismiss option purges the removal commands from the queue and the system does not remove the internal application off devices.
- For dismissed commands, return to the internal applications area of the console and select the smart group assignments of the application for which you dismissed commands. Ensure that the internal application's smart group assignments are still valid.If the smart group assignment is invalid and you do not select it, the system can remove the application when the device checks-in with the system.
- You can select Release or Dismiss.