When a device is placed in app restrict
During an app restriction, Defender will only allow Microsoft applications to run or execute, and an alert when attempting to run another app will look like this.
Whilst the device is in app restrict, the user can proceed with their usual work, albeit having to use Edge and WHB in place of Chrome and HYPR, as an example.
Typically, the restriction lasts for 30 minutes, and if Defender does not conclude the scenario after 35 minutes, the device will remain in restrict and need to be manually released.
How to release a device from app restrict
Please note, this only applies to devices who are not released automatically from App Restrict. If the 35 minutes has not lapsed, please wait.
1. To release a device from app restrict, please open BeyondTrust, and then Defender and search for device.
2. When device is selected, it will open a blade on the right - please select 'open device page'.
3. Within the device page, select the right menu and run anti virus scan
4. Once the full scan is completed (you can see this on the main panel of the device page in Defender, or on the user device locally), the device can safely be released from App restrict.