cant open company portal after enabling applocker default rules for exe

Question

after enabling applocker trough endpoint manager with just the default rules ,only on exe files, i cant open the company portal.
i already tried adding the CompanyPortal.exe hash to the rules but i think it could be an other exe file that is started by the company portal that is blocked how do i find out which ?

in event viewer i get this error in system log:
Unable to start a DCOM Server: Microsoft.CompanyPortal_11.0.11491.0_x64__8wekyb3d8bbwe!App as Unavailable/Unavailable. The error:
"2147943660"
Happened while starting this command:
"C:\Program Files\WindowsApps\Microsoft.CompanyPortal_11.0.11491.0_x64__8wekyb3d8bbwe\CompanyPortal.exe" -ServerName:App.AppX6s9cdx1jy5jd6t9ardd3z4mjbjxsftk4.mca

Answer 1

You must configure a rule under "Packaged App Rule".
First install the Company Portal over the store and then create the rule...

Answer 2

Can I know if the company portal can be opened when applocker enabled on premise not in endpoint manager? The process flow goes like this: We first model the policy we want to implement using AppLocker in Group Policy Editor. We then export the XML for that policy and use it to create a new, custom Windows 10 Device Configuration policy in Intune. Once the custom policy is deployed, the same policy behavior we modeled with AppLocker in Group Policy Editor is then applied to our targeted Windows 10 devices. Therefore, if it restrict Company portal to open, we need to check if the XML file itself has some restriction with Company Portal.

Reference: https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-using-applocker-to-create-custom-intune-policies-for/ba-p/364981

Also, according to my test, after configuring one applocker policy, other policies will be set as Deny by default in Applocker, please also check if all the policies in Applocker have any restriction with Company Portal.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.