# Device Use Shall be restricted until required applications are installed

## Description

When a user is first onboarding to a new device, required applications, such as your AV or Endpoint protection software, should be allowed to install before the user begins to access the device. This setting can be configured as part of the enrollment status page for people enrolling Windows devices and signing in for the first time.

## Policy

* Device Use Shall be restricted until required applications are installed

## Licensing Considerations

• Any tenant with Intune licensing can access this setting.

## Set-Up Instructions

[Set up the Enrollment Status Page in the admin center - Microsoft Intune | Microsoft Learn](https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-enrollment-status)

[Selecting Required Apps for your Enrollment Status Page - Microsoft Community Hub](https://techcommunity.microsoft.com/t5/intune-customer-success/selecting-required-apps-for-your-enrollment-status-page/ba-p/2200381)

![](https://2434432314-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCTly3knsVr9zUXbWG1eo%2Fuploads%2FoGO8MmMHTzLm5zyaeBwZ%2Fpic25.png?alt=media\&token=636e5df6-1e47-463e-8a7d-1dc2f17652e9)

## End-User Impact

{% hint style="info" %}
Level: <mark style="color:yellow;">Medium</mark>
{% endhint %}

This will vary depending on the applications being installed. Its possible the user will have to wait some time for the applications to finish installing. For this reason, its best to define the minimum blocking applications as part of the settings and not make this the full list that will be installed.

{% hint style="info" %}
Tips

None Currently
{% endhint %}

## PowerShell Scripts

None Currently

## Videos&#x20;

{% embed url="<https://www.youtube.com/watch?v=nklZ591Y0GY>" %}

{% embed url="<https://www.youtube.com/watch?v=rmmBUhFGOK0>" %}

{% embed url="<https://www.youtube.com/watch?v=KufimQ49MLk>" %}