- Article
- 8 minutes to read
Administrators can find, deploy, and monitor Microsoft Store apps in Intune. After deployment, Intune automatically keeps apps updated when a new version is available. The Microsoft Store supports UWP apps, desktop apps packaged in.msechs, and now packaged in Win32 apps.exeÖ.msiinstallers
Important
The latest Microsoft Store apps have major feature improvements over legacy features. Specifically, the following differences:
- You can browse and search apps in the Intune Store
- You can install and uninstall with required app deployments
- You can monitor the installation progress and results of the store apps
- Supported Win32 Store apps (in preview)
previous requirements
To use Microsoft Store apps, make sure the following criteria are met:
- Client devices must support at least two core processors to successfully install and run Microsoft Store apps.
- The client device must be able to support thisIntune Management Extension (IME)to install apps from the Microsoft Store.
- The client device needs access to Microsoft Store and target content to install Microsoft Store apps.
Add and deploy a Microsoft Store app
Follow these steps to add and deploy a Microsoft Store app.
Step 1 - Add a Microsoft Store App
- inside sideadministration portal, selectforms>all apps>Add to.
- NoSelect application typepanel, selectMicrosoft Store app (neu)underapp storeSection.
- Chooseselectat the bottom of the page to get started creating a Microsoft Store app. Creating the application consists of three steps:
- application information
- assignments
- revise + create
Step 2 - Search the Microsoft Store
The Microsoft Store offers a wide range of apps designed to work on your Microsoft devices. In Intune, you can search for and add the apps that you want to assign to your organization's employees.
selectBrowse the Microsoft Store appto display the search box, which is a search bar and contains the following columns:
- Name- The name of the application.
- editor– The application editor.
- he writes– The package type of the app: Win32 or Universal Windows Platform (UWP).
In the search bar, type the name of the app you want to find. You can also search other app details eg B. by publisher, type or store app ID. After the search, a list of applications will appear.
Use
Certain Microsoft Store apps may not appear or be available in Intune. Common reasons why an app doesn't appear when searching in Intune are:
(Video) How to deploy Microsoft Store Apps using Microsoft Intune | Deploy Windows Store Apps via Intune- The app is not available in your region
- The app is not available if there is an age restriction.
- The app is a paid app which is not supported
- The app is an android app.
- The app is a Microsoft Store for Business app that is not publicly available on the consumer store.
Select the app you want to deploy and clickselect.Application information is displayed with the metadata of the selected application. Some fields are pre-populated.
The following table shows supported fields:
Field name Description Necessary Name The app name is pre-populated from the store metadata and you have the option to edit the field. Enter the app name as it appears in the Company Portal. Make sure that any app names you use are unique. If the same app name is present twice, only one of the apps will appear in the Company Portal. Necessary Description The app description is pre-populated from the store metadata and you have the option to edit the field. The description appears on the company portal. Necessary editor The app editor is pre-populated from store metadata and provides the ability to edit the field. Necessary installation type The app package installer type is differentiated by UWP or Win32 installer types. For more information, seeApps for the Universal Windows Platform (UWP).. N/A pre-installed packet identifier The app's unique ID in the Microsoft Store. This value is read-only and is displayed in front of the installation type in the user interface. N/A pre-installed installation behavior Application installation behavior. If the application to be installed has the option to do soSystemÖfrom the userInstallation behavior, you need to ensure that the installation works as expected on devices. NOTE: If the option is grayed out, the store-specific app only supports the selected install behavior. The administrator must chooseSystemÖfrom the user Category Optionally, select one or more built-in app categories or a category you create. Categories make it easy for users to find the app when browsing the company portal. Optional Show this as a featured app on the Company Portal Make your app featured on the Company Portal home page when users search for apps. Admin must select Yes or No Information-URL Optionally, enter the URL of a website that contains information about this application. The URL is displayed on the company portal. Optional Privacy URL Optionally, enter the URL of a website that contains privacy information for this app. The URL is displayed on the company portal. N/A pre-installed developer Optionally, enter the name of the application developer. Optional owner Optionally, enter a name for the owner of this app. an example isHR department. Optional Nuts Enter the notes you want to associate with this app. Optional Logo Upload an icon associated with the application. This icon appears with the app when users browse the company portal. Optional selectNextafter filling in the fields.
Step 3: Create Tasks
You can choose how you want to assign Microsoft Store apps to users and devices.
The following table provides details about the type of mapping:
| type of task | mapping options | Description |
|---|---|---|
| Necessary | Add Group, Add All Users, Add All Devices | The application will be installed on the devices of the selected groups. |
| Available for registered devices | Add Group, Add All Users | Users install the app from the Company Portal app or the Company Portal website. |
| uninstall | Add Group, Add All Users, Add All Devices | The app is uninstalled from devices in the selected groups. |
- selectadd groupand assign the groups that will use this app.
- About itselect groupsOn the dashboard, select groups to assign based on users or devices.
- After selecting your groups, decide if you want to configure themEnd User Notifications,Reset grace period, jinstallation time.
- If you don't want app assignment to affect user pools, chooseIncludedunderfilter modePillar. inside sideedit taskDashboard, change thefilter modevalue ofIncludedandeleted. selectOKclose theedit taskCristal.
- selectNextto show therevise + createafter you finish configuring the mappings for the applications.
Step 4 - Review and Create
- Check the values and settings you entered for the app. Make sure you've set up the app information correctly.
- selectCryingto add the app to Intune.
app update
Apps deployed from the Microsoft Store are automatically updated with the latest version of the app. For this feature to work correctly for UWP apps, theDisable automatic download and installation of updatesmust not be activated.
Microsoft Store Win32 Apps
Important
Win32 apps located in the Microsoft Store are currently in preview. Not all Win32 applications are available or searchable. Win32 applications that are in preview are marked withWin32and a flag.
Third parties or publishers who add Win32 apps to the Microsoft Store are responsible for hosting their own content on their respective infrastructures. If your devices are behind a firewall, contact the app owner to understand and confirm the network requirements.
Intune management of Microsoft Store Win32 apps
When a Microsoft Store Win32 app is published to a device likeNecessary, but it is already installed (manually or through theMicrosoft Store for Business) Intune takes care of managing the app.
For Win32 apps available from the Microsoft Store and UWP apps, the end user must click "Install" in the Company Portal before Intune takes over management of the app. Intune doesn't try to reinstall the app.
The Microsoft Store supports Win32 app types, including.exej.msiInstaller These apps have external content sources hosted by the app publisher. As defined by the installer in the store, any Win32 application is compatible withfrom the userÖSystemcontext installation. For more information, seeTraditional desktop apps in the Microsoft Store on Windows.
Save group policy restrictions
Somesave group policymay affect Microsoft Store app deployments.
The following table provides details on how application delivery may be affected.save group policy:
| save group policy | desired configuration |
|---|---|
| Store\Disable all Microsoft Store apps | not configuredÖdisabled people. adapted todisabled peopleif you want to prevent end users from crashing the scenario. |
| Store\Disable automatic download and installation of updates | not configuredÖdisabled people. adapted todisabled peopleif you need to prevent end users from crashing the scenario. |
| Enable Desktop App Installer\Microsoft Store Source App Installer | not configuredÖactivated. adapted toactivatedif you want to prevent end users from crashing the scenario. |
| Enable Desktop App Installer\App Installer | not configuredÖactivated. adapted toactivatedif you want to prevent end users from crashing the scenario. |
| Store\Shutdown Store-App | not configuredÖdisabled people. adapted todisabled peopleif you need to prevent end users from crashing the scenario. |
Use
If you want to prevent the end user from installing any app from the App Store without blocking the Intune Store and Windows Package Manager integration, configureStore\Show only private store in Microsoft Storeanactivated.
Unsupported functionality for Microsoft Store apps
The following features are not supported in Microsoft Store apps:
- Ability to install apps from Microsoft Store during registration status page. Apps provided with the Microsoft Store app will be installed after completing the registration status page.
- Device deployment of Universal Windows Platform (UWP) apps from the Microsoft Store is not supported.
- Applications with an ARM64 installer are not supported.
The ability to install apps from the Microsoft Store during enrollment status page and device deployment of Universal Windows Platform (UWP) apps from the Microsoft Store will be available in a future release.
Next steps
- Assign apps to groups
FAQs
How do I sync Microsoft Store for Business with Intune? ›
Link Intune to Microsoft Store for business
Navigate to your favorite URL https://devicemanagement.microsoft.com (which is bookmarked offoucrse). Click 'Client Apps' and choose 'Microsoft Store for Business near the bottom. You will now navigate to the Microsoft Store for Business (MSfB) setup screen within Intune.
| App | Platform | Core App Protection Policy settings |
|---|---|---|
| Office (Microsoft 365) | Android | ✔ |
| Office (Microsoft 365) | iOS | ✔ |
| Microsoft OneDrive | Android | ✔ |
| Microsoft OneDrive | iOS | ✔ |
Sign in to Microsoft Endpoint Manager admin center. In the Managed Desktop pane, select Apps. In the Apps workload section, select the app you want to assign users to, and select Assign users groups. For the specific app, select an assignment type (Available, Required, Uninstall) and assign the appropriate group.
Can Intune Manage third party Apps? ›Select the required third-party application that you wish to create in Intune/MEM, customize the deployment with pre/post scripts if required, and click 'Create Application' option. Now, you can see that the selected third-party application is created in the Apps section under Client Apps.
How do I add Apps to Microsoft Company Portal? ›- Open the Company Portal app and sign in with your work or school account.
- Find and install apps from any of the following sections of the Company Portal app: Home: Select from a list of your organization's featured apps. ...
- Select an app.
- On the apps details page, click Install.
Sign in to the Microsoft Endpoint Manager admin center. Select Devices > All devices. In the list of devices you manage, select a device to open its Overview pane, and then select Sync. To confirm, select Yes.
How do I enable Microsoft Store for Business? ›Go to https://www.microsoft.com/business-store, or https://www.microsoft.com/education-store and click Sign up. If you start Microsoft Store sign-up process, and don't have an Azure AD directory for your organization, we'll help you create one. For more info, see Sign up for Azure AD accounts.
How do I link a device to Microsoft Store? ›On an Xbox or Windows device: Sign in to your Microsoft account. On your Windows PC: Sign in to the Microsoft Store. On any device with a browser: Go to account.microsoft.com/devices, select Register device, then follow the instructions.
Is Microsoft Intune going away? ›The decision is up to each organization, and Microsoft will continue to invest in both ConfigMgr and Intune as part of Microsoft Endpoint Manager. And yes, you can still use the ConfigMgr console, while additionally leveraging the cloud console to bring you the benefits of the cloud now. Is Intune going away? No.
What are the disadvantages of using Microsoft Intune? ›- Intune CONS :
- * Narrow focus on mobile devices; not a full systems-management platform.
- * Doesn't support server-side applications.
- * Not intended for large applications.
- * Doesn't have the feature-set to handle complex package deployments.
How do I add VPP apps to Intune? ›
- Sign in to the Intune for Education portal.
- Click Apps.
- From the app list, under iOS Apps, click New app.
- Select the country/region from where you're purchasing the app.
- Type in the app's full or partial name. ...
- Select the app.
APPXBUNDLE or . MSIXBUNDLE extension. In the installation pop-up, click Install. Let the installation complete, and your Microsoft Store app will be successfully installed on your device without having to use the Microsoft Store.
Can Intune deploy Apps? ›Microsoft Intune supports a variety of app types and deployment scenarios on Windows 10 devices. After you've added an app to Intune, you can assign the app to users and devices.
How do I add Microsoft Store app to SCCM? ›- Launch Admin Console.
- Navigate to \Software Library\Overview\Application Management\Applications.
- Select an application called Company Portal.
- Click on the Deployment Types tab.
Intune is a cloud-based solution that allows you to manage company-owned and personal devices, while SCCM is a more traditional on-premises solution.
What is the difference between MAM and MDM Intune? ›MDM is a way of securing mobile devices such as smartphones and tablets, whereas MAM secures the applications on those devices that are used to access organizational data, such as Outlook, SharePoint, and OneDrive. MDM software is typically designed to support one or more operating systems such as iOS and Android.
Does Intune override GPO? ›Result – Intune Policies Override Group Policy Settings – The winner is here Group Policy Vs. Intune Policy. Finally, MDM CSP wins over GP. As shown below, MDM CSP configures the “Home Page” value.
Can Apps be added to Portal? ›Note that you can download apps onto your Portal at any time by going to the Home section and selecting Apps, which will allow you to easily search and download apps you are interested in.
What Apps can you install on portal? ›With Facebook Portal, you can connect to WhatsApp, Spotify, Netflix, Paramount+, Facebook, Instagram, Messenger, Prime Video, Pandora, iHeart Radio, Showtime, Food Network, Newsy, and more. Portal works with Zoom, and other video conferencing apps like GoToMeeting, Workplace, BlueJeans, and WebEx.
Can you deploy Apps to an iOS device that is not enrolled in Microsoft Intune? ›Currently, you can assign iOS/iPadOS and Android apps (line-of-business and store-purchased apps) to devices that aren't enrolled with Intune. To receive app updates on devices that aren't enrolled with Intune, device users must go to their organization's Company Portal and manually install app updates.
How do I sync Apps with Intune? ›
Sign in to the Microsoft Endpoint Manager admin center. Select Devices > All devices. In the list of devices you manage, select a device to open its Overview pane, and then select Sync. To confirm, select Yes.
How do I add VPP Apps to Intune? ›- Sign in to the Intune for Education portal.
- Click Apps.
- From the app list, under iOS Apps, click New app.
- Select the country/region from where you're purchasing the app.
- Type in the app's full or partial name. ...
- Select the app.
- In the Add app pane, click Select app package file.
- In the App package file pane, select the browse button. Then, select an macOS installation file with the extension . pkg. The app details will be displayed.
- When you're finished, select OK on the App package file pane to add the app.
You cannot uninstall the 'Microsoft 365 apps for macOS' app suite through Intune.
Can Microsoft Intune see my apps? ›On personal devices, your organization can only see your managed app inventory, which includes work and school apps. On corporate-owned devices, your organization can see all apps installed on the device.
How do I manage apps in Intune Company Portal? ›To do this, navigate to Microsoft Endpoint Manager admin center, and select Tenant Administration > Customization, where you can either edit the default policy or create up to 10 group targeted policies. These settings will apply to the Company Portal apps, Company Portal website, and Intune app on Android.
Can Intune manage iOS apps? ›Deploy apps
You can use Intune to manage the whole device (including apps) or use Intune to manage the apps only. Add iOS/iPadOS apps from the App Store to Intune, and assign to groups. Add web apps to Intune and assign to groups.
- Moving from ConfigMgr to Intune.
- Prerequisites.
- Step 1 – Preparing the App.
- Step 2 – Creating the application.
- Step 3 – Publishing the Application in MEM (Microsoft Endpoint Manager)
- Summary.
You can import your on-premises Group Policy Objects (GPOs), and create an Intune policy using these imported settings. This policy can be deployed to users and devices managed by your organization.
Can Intune deploy apps? ›Microsoft Intune supports a variety of app types and deployment scenarios on Windows 10 devices. After you've added an app to Intune, you can assign the app to users and devices.
How do I add apps to Apple MDM? ›
Select Devices or Device Groups from the Profile Manager sidebar, then select the specific device or device group. Select the Apps tab. Click the Add button to view the app list. Select the app or apps you want to assign to the device.
How do I add Google Play to my Intune app? ›Go to the Managed Google Play store. Sign in with the same account you used to configure the connection between Intune and Android Enterprise. Search the store and select the app you want to assign by using Intune. On the page that displays the app, click Approve.
Can you deploy apps to an iOS device that is not enrolled in Microsoft Intune? ›Currently, you can assign iOS/iPadOS and Android apps (line-of-business and store-purchased apps) to devices that aren't enrolled with Intune. To receive app updates on devices that aren't enrolled with Intune, device users must go to their organization's Company Portal and manually install app updates.