App deployment
Types of apps available in Intune
-
Add Microsoft Store apps to Microsoft Intune | Microsoft Learn
Windows Store Apps can be easily deployed through the Intune portal by selecting the Windows Store Apps (new) option and searching for the desired app. This creates an individual instance of the app which can be scoped and assigned like any other Windows app.
Windows Store Apps are automatically kept up to date by Intune.
-
Win32 app management in Microsoft Intune | Microsoft Learn
This comprises of any Windows app that can be silently installed, the most common types being MSIs or EXEs. Installation packages must be packaged into the Intunewin format using the Microsoft Win32 Content Prep Tool before it can be added to Intune for deployment, specifying the silent install/uninstall commands and detection rules in the wizard.
It is highly recommended to exclusively use Win32 apps instead of LOB, as there is a potential for deployment failure during Autopilot enrolment if mixing the two types.
It’s possible to deploy a PowerShell script as an app by packaging it up as a Win32 app. This will enforce the PowerShell script, in accordance with its detection rules, rather than just running once.
-
These apps are added to Intune for deployment through Apple School Manager (ASM)
There will be a separate instance of each app for every VPP token that it’s assigned to in ASM. The name cannot be changed so please make sure the correct instance is used when assigning to groups for deployment – this can be identified by clicking on the app and checking the associated VPP token Apple Id. Due to this behaviour, we recommend deploying iOS apps through Intune for Education.
By default, the license type of the VPP apps are set to ‘device’. This means you do not need to associate an Apple Id with it and all users of that device will be able to use it.
Shared iPads do not support installing ‘available’ apps through the Company Portal. All apps that may be needed on a shared iPad should be installed as required and can then be hidden for different user groups via configuration policies.
-
This allows apps to be deployed to macOS outside of the Volume Purchase Programme.
Intune support deploying both managed apps in the DMG format and unmanaged apps in the PKG format.
Add a macOS DMG app to Microsoft Intune | Microsoft Learn
Add an unmanaged macOS PKG app to Microsoft Intune | Microsoft Learn -
These are simply shortcuts to websites that can be deployed to all types of devices.
For iOS, this will create a shortcut icon on the home screen. For Windows devices, the shortcut is added to the start menu.
Deploying apps through the Intune portal
To deploy an app to a device or user, it must be assigned to an Intune group containing them. There are several assignment options available for an app:
- Required - the app is automatically installed on the device (for any user) if applied to a device group, or whenever a user logs on (on any compatible device) if applied to a user group.
- Available – can only be applied to user groups, which makes the app available for self-service installation in the Company Portal. This is not applicable to users on shared iPads.
- Uninstall – can be assigned to a device or user group to uninstall the app.
When using a user group assignment, the app is installed to the device and usable by all users on that device, unless the app supports installation in the user context (such as Google Chrome).
Removing a group from the ‘Required’ assignment in Intune does not result in the app being uninstalled, it just prevents future users or devices in that group from receiving the app. You must explicitly add the group to the ‘Uninstall’ assignment.
Deploying apps through Intune for Education
Although apps can be deployed through the Intune portal, we recommend using Intune for Education, especially when assigning VPP apps and/or multiple apps to a device group.
This is the recommended method when delegating app deployment to school technicians.
- Browse to https://intuneeducation.portal.azure.com
- Click Groups, and search for the desired group if required.
- Select the target group.
- Click on Windows apps or iOS apps – this will show the apps currently assigned to the group and the assignment type.
- Click Edit and select the apps you wish to install.
- Click
Deploy Microsoft 365 Apps
- Browse to the Intune portal.
- Click on Apps -> All apps -> Add.
- Select Windows 10 and later or MacOS under the Microsoft 365 apps heading in the drop-down box.
- Edit the Suite Name field to name the package appropriately – it’s recommended to prefix with the school number for easy identification.
- For Windows devices, on the Configuration app suite step, select Enter XML data from the drop-down box.
- Continue with the wizard.
The XML data can be easily generated using the Office Customisation Tool:
- Got to https://config.office.com
- Click Create a new configuration (or import an existing one to edit).
- Select the desired deployment options, using these recommendations:
- Products > Office Suites = Microsoft 365 Apps for Enterprise.
- Apps = toggle as desired to include/exclude apps.
- Language > Primary language = Match Operating System.
- Language > Additional languages = Welsh (Partial), if desired.
- Language > Additional proofing tools = Welsh, if desired.
- Licensing and activation > Automatically accept the EULA = On.
- Licensing and activation > Product activation = Device based.
- Export the XML file, completing the additional prompts.
- Open the XML file and copy and paste the contents into the Intune windows.
- Click Validate XML to confirm, then Next
Device based activation is not available for MacOS. This requires user activation and consumes one of their allowed activations. Consider deploying Office LTSC for Mac 2021 with the Volume License Serializer instead.
Overview of the Volume License (VL) Serializer | Microsoft Learn