Deploy Microsoft Store Apps to Managed Devices Using Intune

Table of Contents

There are several methods to deploy applications on Windows devices using Intune, such as the Win32 app deployment method and the Line of Business (LOB) App deployment method. In this blog post, we will explore another app deployment method, which is deploying Microsoft Store apps.

The Microsoft Store supports various types of apps, including UWP apps, desktop apps packaged in .msix format, and Win32 apps packaged in .exe or .msi installers. You can easily search for these apps directly from the Intune portal, create the app deployment, and assign it to the desired devices or users.

Prerequisites

Before you begin, the following criteria should be met for a deployment:

• OS version: Windows 10 version 1607 or later (Enterprise, Pro or Education editions).
• Devices must be enrolled in Intune and either:
• Azure AD registered (Workplace Join)
• Azure AD joined (Entra ID Joined)
• Hybrid Azure AD joined

Steps to deploy Microsoft Store Apps using Intune

Please find below the steps to deploy Microsoft Store apps using Intune.

1. Login to Microsoft Intune Admin Center and navigate to Apps > All apps > Click on +Add.

2. On the flyer window at the right side of the screen, Select Microsoft Store app (new) from the App type.

3. In the App Information tab, Click on Search the Microsoft Store app (new) to search for any store application.

4. Type the name of the app you want to search, and press Enter. Select the app from the search results.

5. After selecting the app, most of the information related to the app will be auto-filled including Name, Package Identifier, Publisher, Description, etc. You can modify some of this information if you want.

Install behavior: Depending upon the application, you may be able to toggle between System and User context. But if the Install behavior is pre-selected and greyed out then it cannot be changed.

• System context: Azure AD registered, Azure AD joined (Entra ID Joined), Hybrid Azure AD joined.
• User context: Azure AD joined (Entra ID Joined), Hybrid Azure AD joined.

6. On the Assignments tab, you have the option to click on + Add all users or + Add all devices to target all users or all devices. However, if you want to restrict this deployment to a specific group of users or devices, you’ll need to create an Azure AD security group, add the specific users or devices to that group, and then target the deployment to that group.

Quick snapshot about Assignment in Intune:

• Required: The app is deployed automatically on devices in the selected groups.
• Available for enrolled devices: The app will not be installed automatically. Instead, it will be made available for installation from the Company Portal app or website.
• Uninstall: The app is uninstalled from devices in the selected groups if Intune has previously installed the application onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

You can also configure the following settings on the Assignment page.

• End User notifications
• Delivery optimization priority
• App Availability
• App Installation deadline

We would also recommend changing the end-user notifications to hide all toast notifications unless you’re interested in getting slack messages from every single concerned user in the office about the strange installation notification they’re receiving.

Related: Assign Apps to Groups with Microsoft Intune.

7. Click on the Next on Assignment page to move to Review + create page. On the Review + create page, review the settings and click on Create.

8. The app is being created, you can monitor the progress from the Notification area.

Sync devices with Intune

Once the app is created, it will be installed on the managed devices on the next time they check in with Intune. For quick check in, you can restart a managed device or run the below command to force sync.

Restart-Service -Name IntuneManagementExtension

Related: Force Sync Devices to Get the Latest Policies and Actions with Intune.

Installation is logged in the IntuneManagementExtension.log that can be found under:

C:ProgramDataMicrosoftIntuneManagementExtensionLogsIntuneManagementExtension.log

Related: Access and Read Intune Management Extension Logs

Tracking deployment in Intune and End User Experience

End User Experience

If you do not disable the toast notification, users may see a notification appear in the system tray via the Microsoft Intune Management Extension, indicating that the app has been installed successfully.

On a target computer by your deployment, open the Company Portal or the Installed apps section on Windows Settings to verify the app is installed.

Tracking deployment in Intune

With Intune, you can also track the progress of any deployment. To do it, go to Microsoft Intune admin center > Apps > All apps and click the app from the list. The items from the left-hand menu allow you to access various deployment progress information:

• Overview — here you can get general information on installation status for devices and users in the form of charts.
• Device install status & User install status — allow you to view the install status lists showing specific devices and users.
• Finally, by clicking Properties, you can edit your app deployment policy.

Not a reader? Watch this related video tutorial:

https://youtu.be/BuxBpLgt-8g

https://bonguides.com/deploy-microsoft-store-apps-to-managed-devices-using-intune/?feed_id=64&_unique_id=65bcf8b7bc1f8