Application black/whitelisting for Windows Phone


This article describes Miradore's application blacklist and whitelist configuration profiles for Windows Phone. These configurations are available for Enterprise Plan customers. See more in How to upgrade Subscription for further information. Application blacklisting and whitelisting requires the Windows Phone 8.1 platform or newer.


What does application blacklisting or whitelisting mean?

Application blacklisting means that the defined applications cannot be installed to a target device. If a blacklisted application is already installed, it is blocked and cannot be started.

Application whitelisting means that all applications, except the ones explicitly defined, are blocked. The end-user can only install or use those applications that have explicitly been defined. 

NOTE: You cannot blacklist or whitelist native 1st party applications published by Microsoft in Windows Phone 8.1. However, you can use Miradore's restrictions policy to block Camera, Store and Internet Explorer and some other built-in features.

Windows 10 Mobile applications identifiers listed at can be used to blacklist or whitelist Windows 10 Mobile system applications by inputting the identifier to the text box.


How to deploy an application blacklist or whitelist configuration to a device

First you need to create a new configuration profile and define the affected applications. The process of creating application blacklist and whitelist configurations is identical, so we will only use the blacklist configuration as an example.

Start by navigating to Mobile management > Configuration profiles and creating an application blacklist configuration for Windows Phone. See Creating a configuration profile for more details. When creating the profile you have to define the affected applications. Applications are identified by application specific GUIDs. The GUID is parsed from the application's Windows Phone Store page. Open a browser and find the target application from the Windows Phone Store. To add Angry Birds to your new profile, copy from the browser address bar and paste it to the input box and then press add.

Also application identifiers (GUIDs) can be inputted to the text box, if the identifier is already known.

You can add as many applications as you want. When you've added all the applications you want, press Next.



Once the blacklist configuration profile has been created, administrators can deploy it to all Windows Phone 8.1 devices in your Miradore site. See more in Deploying a configuration profile for further information. After the profile has been successfully deployed, the defined applications can no longer be used or installed.



There can only be one application blacklist OR whitelist configuration active in a single device simultaneously. The last one successfully deployed is always the one that is active. Deploying another blacklist or whitelist configuration will override the previous one.


Viewing active restrictions

Blacklisted and whitelisted applications are collected as part of the device inventory. To view which restrictions are currently active on a device, open the device form and go to the Inventory tab. Active restrictions can be seen in the Application restrictions table. 



How to disable application blacklist/whitelist configurations

Application blacklists and whitelists can be disabled by simply deleting the deployed configuration profile from the device. This can be done by opening the device page and clicking the trashcan icon in the Configuration profiles table. See Removing deployed configuration profiles for further information.


Please send comments to