Intune app protection policies can be configured and implemented without device enrollment. However, for Android devices, you are still required to install the Intune Company Portal app on the device for app protection policies to be enforced.