Table of Contents
There are several methods to deploy applications on Windows devices using Intune, such as the Win32 app deployment method and the Line of Business (LOB) App deployment method. In this blog post, we will explore another app deployment method, which is deploying Microsoft Store apps.
The Microsoft Store supports various types of apps, including UWP apps, desktop apps packaged in .msix format, and Win32 apps packaged in .exe or .msi installers. You can easily search for these apps directly from the Intune portal, create the app deployment, and assign it to the desired devices or users.
Prerequisites
Before you begin, the following criteria should be met for a deployment:
- OS version: Windows 10 version 1607 or later (Enterprise, Pro or Education editions).
- Devices must be enrolled in Intune and either:
- Azure AD registered (Workplace Join)
- Azure AD joined (Entra ID Joined)
- Hybrid Azure AD joined
Steps to deploy Microsoft Store Apps using Intune
Please find below the steps to deploy Microsoft Store apps using Intune.
1. Login to Microsoft Intune Admin Center and navigate to Apps > All apps > Click on +Add.
2. On the flyer window at the right side of the screen, Select Microsoft Store app (new) from the App type.
3. In the App Information tab, Click on Search the Microsoft Store app (new) to search for any store application.
4. Type the name of the app you want to search, and press Enter. Select the app from the search results.
5. After selecting the app, most of the information related to the app will be auto-filled including Name, Package Identifier, Publisher, Description, etc. You can modify some of this information if you want.
Install behavior: Depending upon the application, you may be able to toggle between System and User context. But if the Install behavior is pre-selected and greyed out then it cannot be changed.
- System context: Azure AD registered, Azure AD joined (Entra ID Joined), Hybrid Azure AD joined.
- User context: Azure AD joined (Entra ID Joined), Hybrid Azure AD joined.
6. On the Assignments tab, you have the option to click on + Add all users or + Add all devices to target all users or all devices. However, if you want to restrict this deployment to a specific group of users or devices, you’ll need to create an Azure AD security group, add the specific users or devices to that group, and then target the deployment to that group.
Quick snapshot about Assignment in Intune:
- Required: The app is deployed automatically on devices in the selected groups.
- Available for enrolled devices: The app will not be installed automatically. Instead, it will be made available for installation from the Company Portal app or website.
- Uninstall: The app is uninstalled from devices in the selected groups if Intune has previously installed the application onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.
You can also configure the following settings on the Assignment page.
- End User notifications
- Delivery optimization priority
- App Availability
- App Installation deadline
We would also recommend changing the end-user notifications to hide all toast notifications unless you’re interested in getting slack messages from every single concerned user in the office about the strange installation notification they’re receiving.
7. Click on the Next on Assignment page to move to Review + create page. On the Review + create page, review the settings and click on Create.
8. The app is being created, you can monitor the progress from the Notification area.
Sync devices with Intune
Once the app is created, it will be installed on the managed devices on the next time they check in with Intune. For quick check in, you can restart a managed device or run the below command to force sync.
Restart-Service -Name IntuneManagementExtensionInstallation is logged in the IntuneManagementExtension.log that can be found under:
C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.log
Tracking deployment in Intune and End User Experience
End User Experience
If you do not disable the toast notification, users may see a notification appear in the system tray via the Microsoft Intune Management Extension, indicating that the app has been installed successfully.
On a target computer by your deployment, open the Company Portal or the Installed apps section on Windows Settings to verify the app is installed.
Tracking deployment in Intune
With Intune, you can also track the progress of any deployment. To do it, go to Microsoft Intune admin center > Apps > All apps and click the app from the list. The items from the left-hand menu allow you to access various deployment progress information:
- Overview – here you can get general information on installation status for devices and users in the form of charts.
- Device install status & User install status – allow you to view the install status lists showing specific devices and users.
Finally, by clicking Properties, you can edit your app deployment policy.
Troubleshooting App Installation Issues
1. Unable to find an application when using the Microsoft Store app (new) method
If you’re searching for an app using the Microsoft Store app (new) app type and can’t find it, you can follow the steps below:
- Try to search for the app in the Microsoft public store on your computer to see if it’s available.
- If the app is available in the Microsoft Store then find its Package Identifier using App URL.
Search for the application on the Intune portal using Package Identifier to see if you are able to find the application now.
2. What happens if an existing app is deployed using Microsoft Store App (new)
If a Win32 app is already present on the end user’s device and was either deployed using Microsoft Intune or installed manually, and you attempt to deploy the same application using the Microsoft Store app (new) method, the application will not be re-installed. Intune will take over the management of the application without reinstalling it.
3. Does the Win32 App Deployed Through the Microsoft Store App (New) Method Receive Regular Updates?
Yes, similar to UWP apps, a Win32 app deployed using the Microsoft Store app (new) method will be automatically kept up to date by Intune.
4. The application was not detected after the installation was completed successfully (0x87D1041C).
If you encounter error code 0x87D1041C after deploying the Company Portal app on Windows devices, it may be due to the application already being installed on the target device. This is a known issue and is documented on Microsoft’s website.
Conclusion
Deploying applications with Microsoft Intune provides a centralized, secure, and cost-effective way to manage and distribute software in an organization. With the ability to monitor the deployment progress from the Intune admin portal, IT administrators can ensure that the applications are deployed and functioning as intended on their managed devices.
Related: Below is the list of our posts that will help you to configure and manage devices
- Prepare Win32 app package for upload.
- Understanding Intune Detection Rules.
- Deploy an Win32 App with Dependencies.
- Upgrade or Replace app with Supersedence in Intune.
- Assign Apps to Groups with Microsoft Intune.
- Force sync devices in Intune.
- Access and Read Intune Management Extension Logs.
- Deploy Microsoft Store Apps Using Intune.
- Deploy PowerShell Script using Intune
Not a reader? Watch this related video tutorial:
