The end-user doesn't have problems with both the Ring app AND the Teams plugin. The problem isn't installing the app, but specifically after the app is deployed it asks the user to Allow changes to the firewall.

Do we have any Documentation that shows how to Deploy the Apps without asking the user to Allow changes to the Firewall? The users are prohibited from making changes to the Firewall. Microsoft Defender is blocking the full Deployment, and the Staff do not have admin rights in their Microsoft accounts, so IT has to do an MSI Push.

It was recommended to manage firewall rules in a central location (GPO or WDAC) - needs to be added to that to avoid the user interaction.

Sample link for WDAC: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/deployment/deploy-wdac-policies-using-group-policy

Their IT hesitated to use GPO. Is there another work around for this request?

When they push the RingCentral app or Teams plugin, it installs in the user's app data folder, and it requires a firewall rule change to allow that version or copy of that app. Their users don't have admin permission to modify their firewall rules