Your IT Admin has restricted access to the app - System UI

[RandyLahey]

When attempting to load AnyDesk i'm able to make a connection to the device and it prompts the user to accept, but then the user receives the error in the subject (Your IT Admin has restricted access to the app - System UI) before it can be approved. I have found two articles concerning this linked below.

• https://kb.vmware.com/s/article/50103901
  • However I'm unsure of where the "Secure Launcher hidden apps section" is. I checked the Hidden Apps under Layout in the profile for this device, but I'm not seeing System UI anywhere.
• https://communities.vmware.com/t5/Workspace-ONE-Discussions/Android-and-System-UI-being-blocked-with...
  • This was marked as "Answered" but i didn't see an answer anywhere and it was originally posted three years ago  

Does anyone know where i can resolve this issue? Thank you!

[scott28tt]

What did your IT admins say when you asked them?

[RandyLahey]

I am the admin of this system, I've been assigned the task of getting these devices to work.

[callmegibby · Accepted solution]

I am not familiar with AnyDesk but it sounds like you don't have the application inside the Launcher as a visible application? You can add the package name as a hidden application in the Launcher profile. If you go to setting while inside the Launcher on your device > Block applications. You will see the package ID.

In the profile under Launcher in the console. Go to miscellaneous and click "add an app". Application name can be AnyDesk and add the application ID you found in blocked application. Then add the application as hidden app.

[_Steven]

Do you have the Launcher deployed ? If so, check the Launcher menu on the device (cogwheel) for the blacklisted activity then allow it from the Launcher payload on the WS1 console (section named "Allowlist specific Android Activities").

[RandyLahey]

@callmegibby Thank you for the kind response. The AnyDesk application is installed and works perfectly fine when I enable the Admin in the launcher. The AnyDesk application pops up a small "approval" window for the end user, but before they can accept it goes away followed by a message that states "Your IT Admin has restricted access to the app - System UI". I definitely see the system UI being blocked and the package ID (com.android.systemui), but even when i specifically allow it, the behavior persists. 

[RandyLahey]

@_Steven Yes, the launcher has been deployed and otherwise is functioning perfectly.  I tried this yesterday but it didn't have the desired effect.  Thanks for the suggestion!

[callmegibby]

@RandyLahey Have you thought about trying to use VMWare's Assist application (remote capabilities, manage files, command line)? No popups required by the end user either.

Love the name btw lol. 

[_Steven · Accepted solution]

Try to add a "SystemUI" app with package ID "com.android.systemui" in the Hidden Apps section of your Launcher Layout. It should do the trick.

[RandyLahey]

@_Steven & @callmegibby 

Alright boys, time to pack it up. Thanks to your suggestions I was able to get the issue 100% resolved. To clarify, I've only been using airwatch/workspace one uem for a week or so, and finding things has been troublesome to say the least. The screenshot was the icing on the cake that led me to where you all were directing me. 

Thank you both SO MUCH!