Enable Suggested Apps in Windows Ink Workspace using Intune

Key Takeaways:

• Windows Ink Workspace can display suggested apps to users
• Admins can manage and enable these suggested apps through Intune
• IT teams centralized control over whether suggested apps appear for end users
• Suggested apps helps guide users toward recommended applications

Let’s discuss Enable Suggested Apps in Windows Ink Workspace using Intune. This policy setting determines whether suggested apps in Windows Ink Workspace are allowed. This policy helps organizations want to ensure users only use pre-approved software. Allowing suggestions invites users to download unvetted third-party apps from the Microsoft Store.

Table of Contents

Table of Contents

Enable Suggested Apps in Windows Ink Workspace using Intune

For example, Imagine a classroom full of students with Surface Go devices. If suggestions are enabled, students might spend their math lesson browsing the Microsoft Store for “recommended” games or drawing apps instead of focusing on the curriculum. By disabling this, the IT department ensures the Ink Workspace only shows the tools needed for the lesson, like OneNote.

• Require Password when Computer Wakes on Battery using Intune
• How to Remove Assigned Group from Energy Saver Battery Threshold Policy in Intune Settings Catalog
• Improve Windows PC Performance by using New Efficiency Mode

How to Start Policy Creation

As an Admin, you can quickly configure this policy on your organisation. To start the Policy Creation, open the Microsoft Intune Admin center. Then go to Devices > Configuration >+ Create > +New Policy.

Profile Creation

Profile creation is the necessary step that helps you to assign the policy to appropriate platform and Profile. Here I would like to configure the policy to  Windows 10 and later platform and settings catalog profile. Then click on the Create button.

Filling the Basic Tab

Naming the policy is the primary step that help admins to identify the policy later. This is important and necessary step that allows you to know the purpose of the policy. Here is Name is mandatory and description is optional. After adding this click on the Next button.

Configure Suggested Apps in Windows Ink Workspace

With Settings Picker, you can use the Configuration Settings Tab. On this tab, you can click on the +Add Settings hyperlink to get the Settings Picker. The settings picker shows huge number of settings. Here, I would like to select the settings by browsing by Category. I choose System. Then, I choose Windows Ink Workspace\Allow suggested apps in Windows Ink Workspace settings.

Enable Suggested Apps in Windows Ink Workspace

By default this policy is enable. So The suggested apps in Windows Ink Workspace will be allowed. Click on the Next button to continue.

Disable Suggested Apps in Windows Ink Workspace

By disable this policy The suggested apps in Windows Ink Workspace will not be allowed. Click on the Next button to continue.

Scope Tags

With scope tags, you create a restriction to the visibility of the MPR Notifications. It helps to organise resources as well. Here, I would like to skip this section, because it is not mandatory. Click on the Next button.

Assignments Tab for Selecting Group

To assign the policy to specific groups, you can use the Assignment Tab. Here I click, +Add groups option under Included groups. I choose a group from the list of groups and click on the Select button. Again, I click on the Select button to continue.

Review + Create Tab

Before completing the policy creation, you can review each tab to avoid misconfiguration or policy failure. After verifying all the details, click on the Create Button. After creating the policy, you will get a success message.

Monitoring Status

The Monitoring Status page shows whether the policy has succeeded or not. To quickly configure the policy and take advantage of the policy sync the assigned device on Company Portal. Open the Intune Portal. Go to Devices > Configuration > Search for the Policy. Here, the policy shows as successful.

Event Viewer Details

Event Viewer helps you check the client side and verify the policy status. Open the Client device and open the Event Viewer. Go to Start > Event Viewer. Navigate to Logs: In the left pane, go to Application and Services Logs > Microsoft >   Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin.

Event ID Details
MDM PolicyManager: Set policy int, Policy: (AllowSuggestedAppsInWindowsInkWorkspace), Area: (WindowsInkWorkspace), EnrollmentID requesting merge: (EB427D85-802F-46D9-A3E2- D5B414587F63), Current User: (Device), Int: (0x0), Enrollment Type: (0x6), Scope: (0x0).

Removing the Assigned Group from Settings

If you want to remove the Assigned group from the policy, it is possible from the Intune Portal. To do this, open the Policy on Intune Portal and edit the Assignments tab and the Remove Policy.

To get more detailed information, you can refer to our previous post – Learn How to Delete or Remove App Assignment from Intune using by Step-by-Step Guide.

How to Delete Policy

You can easily delete the Policy from the Intune Portal. From the Configuration section, you can delete the policy. It will completely remove it from the client devices.

For detailed information, you can refer to our previous post – How to Delete Allow Clipboard History Policy in Intune Step by Step Guide.

Windows CSP Details

Allow suggested apps in Windows Ink Workspace. This policy is applicable for Windows 10, version 1607 [10.0.14393] and later. Look at the below screenshot.

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community  and WhatsApp Channel to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM,  Windows,  Cloud PC,  Windows, Entra, Microsoft Security, Career, etc.