This article describes why you are receiving an email notification with “Enterprise App Pending Block Alert for” in the subject line.

Back in October 2025, we sent out a campus notice saying that third party apps required review and approval for use at Virginia Tech. There are three ways that this request for review and approval can be obtained

• By request through Marketplace App Requests
• The first time someone tries to use a non-Microsoft application and encounters “Approval required” (see Troubleshooting Using Non-Microsoft Applications within Microsoft 365 for details)
• Through internal review of existing applications within the environment

If the item is rejected, all users of the application receive the notification that their application will be blocked within 30 days, regardless of if they were the individual who submitted the request for review.

The notification has the subject line, “Enterprise App Pending Block Alert for: <Application Name>”. An example of the content is shown below.

We are writing to let you know that an application you have access to has been reviewed and is scheduled to be blocked in the Virginia Tech Microsoft 365 tenant.

App Name: <Application Name>

Block Reason: Service Duplication, Risk, No Justification, Non-essential, or Non-business use

Comments:

Access will be blocked on: <date>


After this date, you will no longer be able to log in or use the application.

What you need to do:

Export your data: Please download or migrate any important files, projects, processes or data out before the block date.

If you receive this notification, please ensure that you have downloaded or saved any data or items associated with this application before it is blocked. Once the block is in place, we will not lift it.

What are the reasons an application gets rejected

The review team carefully evaluates each request to ensure your privacy and security are not compromised by allowing the application to connect to the environment. Though not all-inclusive, some reasons an application will be rejected are:

• Risk: Too much access to data/apps or personal information, risky vendor, contract or privacy concerns with vendor, requesting too much access to the environment
• Service Duplication: A similar and approved app already exists
• No Justification: A valid use case was not presented
• Non-essential or non-business use: The application is intended only for personal use, provides limited business value, or duplicates an existing app or service, such as a wrapper or theme.

What can I do if my application is rejected?

We recommend using applications that are native to the environment as they likely already have approval or applications that have already been approved.

Why was my application rejected after being approved?

Applications may change their permissions as developers add features or expand functionality. When permissions change, the application must be reviewed again. If the updated permissions do not meet approval criteria, the application will be rejected.

Why was my existing application rejected? I’ve been using it before the block was put into place.

We have many apps (over 2,000) that existed within the environment before the security and privacy mitigations were enforced. are quasi "grandfathered" in as there are 2650 apps in the M365 environment. Current usage and existence doesn't necessary mean they are approved, it may just mean that users installed them before our official review process went into effect. The review process of approving new apps, new variants of old apps (replacements), and already-installed apps will be ongoing.