- Article
- 8 minutes to read
Admins can browse, deploy, and monitor Microsoft Store applications inside Intune. Upon deployment, Intune automatically keeps the apps up to date when a new version becomes available. The Microsoft Store supports UWP apps, desktop apps packaged in .msix, and now Win32 apps packaged in .exe or .msi installers.
Important
There are key improvements to the most recent Microsoft Store apps functionality over legacy functionality.Specifically, the following differences:
- You can browse and search for store apps within Intune
- You can install and uninstall with required app deployments
- You can monitor the installation progress and results for store apps
- Win32 store apps are supported (in preview)
Prerequisites
To use Microsoft Store apps, be sure the following criteria are met:
- Client devices must support at least two core processors to successfully install and run Microsoft Store apps.
- Client device need to be able to support the Intune Management Extension (IME) to install Microsoft Store apps.
- Client device need access to the Microsoft Store and the destination content to install Microsoft Store apps.
Add and deploy a Microsoft Store app
Use the following steps to add and deploy a Microsoft Store app.
Step 1: Add an app from the Microsoft Store
- In the admin portal, select Apps > All apps > Add.
- In Select app type pane, select Microsoft Store app (new) under the Store app section.
- Choose Select at the bottom of the page to begin creating an app from the Microsoft Store.The app creation experience has three steps:
- App information
- Assignments
- Review + create
Step 2: Search the Microsoft Store
The Microsoft Store provides a large variety of apps designed to work on your Microsoft devices. Within Intune, you can search and add the apps you want to assign to your workforce at your organization.
Select Search the Microsoft Store app to display the search panel which features a search bar and includes the following columns:
- Name – The name of the app.
- Publisher – The publisher of the app.
- Type – The app package type: Win32 or Universal Windows Platform (UWP).
In the search bar, type the name of the app that you want to find. You can also search by other app details, such as publisher, type, or store app ID.Once you search, a list of apps are displayed.
Note
Specific Microsoft Store apps may not be displayed and available in Intune. Common reasons an app doesn't appear when searching within Intune include the following:
(Video) How to deploy Microsoft Store Apps using Microsoft Intune | Deploy Windows Store Apps via Intune- The app is not available in your region
- The app is not available if there is an age restriction
- The app is a paid app, which is not supported
- The app is an Android app
- The app is a Microsoft Store for Business app that is not available publicly in the consumer store
Choose the app that you want to deploy and click Select.The app information is presented with the selected app’s metadata. Specific fields are pre-populated.
The following table shows the fields that are supported:
Name of the field Description Required Name The name of the app is pre-populated from the store’s metadata and you have the choice to edit the field. Enter the name of the app as it appears in the Company Portal. Make sure all app names that you use are unique. If the same app name exists twice, only one of the apps appears in the company portal. Required Description The description of the app is pre-populated from the store’s metadata and you have the choice to edit the field. The description appears in the Company Portal. Required Publisher The publisher of the app is pre-populated from the store’s metadata and you have the choice to edit the field. Required Installer Type The installer type of the application package is distinguished by either the UWP or Win32 installer types. For related information, see Universal Windows Platform (UWP) apps. N/A Pre-filled Package Identifier The app’s unique ID in the Microsoft Store. This value is read-only and is displayed before Installer Type in the UI. N/A Pre-filled Install behavior The install behavior of the app. If the app to be installed has the option of either System or User install behaviors, you must ensure that the installation works on devices as expected. NOTE: If the option is greyed out, the specific store application only supports the selected install behavior. Admin must select System or User Category Optionally, select one or more of the built-in app categories, or select a category that you created. Categories make it easier for users to find the app when they browse through the Company Portal. Optional Show this as a featured app in the Company Portal Display the app prominently on the main page of the company portal when users browse for apps. Admin must select Yes or No Information URL Optionally, enter the URL of a website that contains information about this app. The URL appears in the company portal. Optional Privacy URL Optionally, enter the URL of a website that contains privacy information for this app. The URL appears in the company portal. N/A Pre-filled Developer Optionally, enter the name of the app developer. Optional Owner Optionally, enter a name for the owner of this app. An example is HR department. Optional Notes Enter any notes that you want to associate with this app. Optional Logo Upload an icon that is associated with the app. This icon is displayed with the app when users browse through the company portal. Optional Select Next after you have finished populating the fields.
Step 3: Creating assignments
You can choose how you want to assign Microsoft Store apps to users and devices.
The following table provide assignment type details:
| Assignment type | Assignment options | Description |
|---|---|---|
| Required | Add group, Add all users, Add all devices | The app is installed on devices in the selected groups. |
| Available for enrolled devices | Add group, Add all users | Users install the app from the Company Portal app or the Company Portal website. |
| Uninstall | Add group, Add all users, Add all devices | The app is uninstalled from devices in the selected groups. |
- Select Add group and assign the groups that will use this app.
- On the Select groups pane, select groups to assign based on users or devices.
- After you select your groups, choose whether to set End user notifications, Restart grace period, and Installation deadline.
- If you don't want the app assignment to affect groups of users, select Included under the Filter mode column. In the Edit assignment pane, change the Filter mode value from Included to Excluded. Select OK to close the Edit assignment pane.
- Select Next to display the Review + create page after you finish setting the assignments for the apps.
Step 4: Review and create
- Review the values and settings that you entered for the app. Verify that you configured the app information correctly.
- Select Create to add the app to Intune.
App update
Apps that are deployed from the Microsoft Store are automatically kept up to date to the latest version of the app. For this feature to work properly for UWP apps, the Turn off Automatic Download and Install of updates should not be enabled.
Microsoft Store Win32 apps
Important
Win32 apps that are in the Microsoft Store are currently in preview. Not all Win32 apps will be available or searchable. The Win32 apps that are in preview will be identifiable with Win32 and a banner.
Third party vendors or publishers that add Win32 apps to the Microsoft Store are responsible for hosting their own content in their respective infrastructure. If your devices are behind a firewall, please reach out to application owner to understand and confirm network requirements.
Intune management of Microsoft Store Win32 apps
When a Microsoft Store Win32 app is published to a device as Required, but it is already installed (either manually or via the Microsoft Store for Business), Intune will take over the management of the application.
For available Microsoft Store Win32 apps, as well as UWP apps, the end user must click install in the Company Portal before Intune takes over the management of the application. Intune will not attempt to re-install the app.
The Microsoft Store supports Win32 app types including .exe and .msi installers. These apps have external content sourcing hosted by the app publisher. Based on their installer definition in the store, each Win32 app supports either User or System context installation.For related information, see Traditional desktop apps in the Microsoft Store on Windows.
Store group policies restrictions
Some Store Group Policies may affect app deployments from the Microsoft Store.
The following table provides details about how app deployment may be affected by Store Group Policies:
| Store Group Policies | Desired setting |
|---|---|
| Store\Disable all apps from the Microsoft Store | Not configured or Disabled. Set to Disabled if wish to prevent end users from blocking the scenario. |
| Store\Turn off Automatic Download and Install of updates | Not configured or Disabled. Set to Disabled if you need to prevent end users from blocking the scenario. |
| Desktop App Installer\Enable App Installer Microsoft Store Source | Not configured or Enabled. Set to Enabled if wish to prevent end users from blocking the scenario. |
| Desktop App Installer\Enable App Installer | Not configured or Enabled. Set to Enabled if wish to prevent end users from blocking the scenario. |
| Store\Turn off the Store application | Not configured or Disabled. Set to Disabled if you need to prevent end users from blocking the scenario. |
Note
If you would like to block installation of arbitrary applications from the Store application by the end user without blocking the Intune and Windows Package Manager store integration, set Store\Only display the private store within the Microsoft Store to Enabled.
Unsupported functionality for Microsoft Store apps
The following capabilities aren't supported by Microsoft Store apps:
- Ability to install Microsoft Store apps during Enrollment Status Page. Apps deployed using Microsoft Store app will install after enrollment status page has completed.
- Device provisioning of Microsoft Store Universal Windows Platform (UWP) applications are not supported.
- Any app that has an ARM64 installer is not supported.
The ability to install Microsoft Store apps during Enrolment Status Page and device provisioning of Microsoft Store Universal Windows Platform (UWP) applications is coming in a future release.
Next steps
- Assign apps to groups
FAQs
How do I add Microsoft Store app to Intune? ›
In the admin portal, select Apps > All apps > Add. In Select app type pane, select Microsoft Store app (new) under the Store app section. Choose Select at the bottom of the page to begin creating an app from the Microsoft Store.
How do I sync Microsoft Store for Business with Intune? ›Link Intune to Microsoft Store for business
Navigate to your favorite URL https://devicemanagement.microsoft.com (which is bookmarked offoucrse). Click 'Client Apps' and choose 'Microsoft Store for Business near the bottom. You will now navigate to the Microsoft Store for Business (MSfB) setup screen within Intune.
Intune supports available apps from Managed Google Play store on Android Enterprise devices.
How do I deploy Microsoft Store Apps? ›Go to the Microsoft Intune admin center. In the Managed Desktop pane, select Apps. In the Apps workload section, select the app you want to assign users to, and select Assign users groups. For the specific app, select an assignment type (Available, Required, Uninstall) and assign the appropriate group.
How do I add Apps to Microsoft company portal? ›- Open the Company Portal app and sign in with your work or school account.
- Find and install apps from any of the following sections of the Company Portal app: Home: Select from a list of your organization's featured apps. ...
- Select an app.
- On the apps details page, click Install.
To get the URL for your app's Store listing, navigate to the app's Product Identity identity page in the Product management section of Partner Center. The URL is in the format https://apps.microsoft.com/store/detail/<your app's Store ID> .
How do I sync apps with Intune? ›Sign in to the Microsoft Intune admin center. Select Devices > All devices. In the list of devices you manage, select a device to open its Overview pane, and then select Sync. To confirm, select Yes.
How do I distribute an app with Intune? ›- In MEM, navigate to Apps > Windows > + Add and choose the app type Windows app (Win32). ...
- You configure the Win32 application using the add app wizard. ...
- After selecting the file, you populate the files of app metadata. ...
- On the program page, you need to enter install and uninstall commands for your app.
Add devices
Save the CSV file. Sign in to the Microsoft Intune admin center, and go to Devices > Windows > Windows Enrollment. Under Windows Autopilot Deployment Program, select Devices. Select Import.
Select the required third-party application that you wish to create in Intune/MEM, customize the deployment with pre/post scripts if required, and click 'Create Application' option. Now, you can see that the selected third-party application is created in the Apps section under Client Apps.
Can Intune manage third party apps? ›
If your Organization uses Microsoft Intune along with SCCM, or Microsoft Endpoint Manager, you can use Application Management for Intune/MEM in Patch Connect Plus to select the third party applications.
How do I add apps to Intune iOS? ›Sign in to the Microsoft Intune admin center. Select Apps > All apps > Add. In the Select app type pane, under the available Store app types, select iOS store app. Click Select.
Why I Cannot install apps from Microsoft Store? ›If updates for Windows were recently installed, you'll need to restart your PC before you can install apps from Microsoft Store. Your PC isn't authorized to use Microsoft Store apps. You'll need to sign into the app with your Microsoft account.
How do I add Microsoft Store app to SCCM? ›- Launch Admin Console.
- Navigate to \Software Library\Overview\Application Management\Applications.
- Select an application called Company Portal.
- Click on the Deployment Types tab.
Click on Update & security. Click on For developers on the left panel. Switch on Install apps from any source including loose files option. Click Yes to confirm the risks involved in running an app outside the Windows Store.
Who can add Apps to Microsoft Store for Business? ›Admins can assign online-licensed apps to people in their organization. Admins can configure a mobile device management (MDM) tool to synchronize your Microsoft Store inventory. Microsoft Store management tool services work with MDM tools to manage content. Offline licensing is a new licensing option for Windows 10.
Can Apps be added to Portal? ›Note that you can download apps onto your Portal at any time by going to the Home section and selecting Apps, which will allow you to easily search and download apps you are interested in.
Can you assign Apps to devices that are not enrolled with Microsoft Intune? ›You cannot assign apps to devices that are not enrolled with Intune. You can assign wrapped apps or apps that incorporate the Intune SDK to devices that are not enrolled with Intune.
Do you need a Microsoft account to download Apps from the Microsoft Store? ›If you're running Windows 11 or Windows 10, you can download and install some of the apps from the Microsoft Store by using a local account. That's great news for everyone who doesn't want to use the cloud and syncing features that come with signing into a Microsoft account.
How do I remove Microsoft Store for Business app from Intune? ›- Select Manage / Settings.
- Select the tab Distribute and click Deactivate on the Management tools Microsoft Intune.
Can Microsoft Intune see my apps? ›
On personal devices, your organization can only see your managed app inventory, which includes work and school apps. On corporate-owned devices, your organization can see all apps installed on the device.
How do I add apps to sync? ›- Step 1: Make sure your phone is paired and connected to SYNC. ...
- Step 2: Open your chosen app and have it running on your smartphone.
- Step 3: Press the Apps icon on your SYNC Feature bar, and select the app you wish to use.
To do this, navigate to Microsoft Intune admin center, and select Tenant Administration > Customization, where you can either edit the default policy or create up to 10 group targeted policies. These settings will apply to the Company Portal apps, Company Portal website, and Intune app on Android.
How do I create an Intune app package? ›Click Microsoft Intune -> Client Apps blade. Click on Apps and then click on “+Add.” From the Add app blade – Select the options called “Windows App (Win32)” from the drop-down list to upload the IntuneWin package. From App Package File Blade, Browse and select the IntuneWin package you want to upload (created above).
Where does Intune store install files? ›User can see an intuitive notice in the device that indicates that the app is downloading and installing. Download job is created and timer is set. Content is downloaded to C:\Program Files (x86)\Microsoft Intune Management Extension\Content\Incoming\59f9a567-b92d-4dc2-9c7a-fdb94e29275c_1.
How do I bulk import devices into Intune? ›...
Log in to the Microsoft Endpoint Manager admin center portal https://endpoint.microsoft.com.
- You can navigate to Groups > All groups.
- Open the Azure AD Group that you want to import devices to.
- Navigate to Bulk operations > Import members.
- Enable coexistence. ...
- Sign in to the Microsoft Intune admin center with Azure AD Global or License administrator rights.
- Assign Intune licenses to the users you want to migrate by using Users or Groups:
Microsoft Intune supports a variety of app types and deployment scenarios on Windows 10 devices. After you've added an app to Intune, you can assign the app to users and devices.
Can I install 3rd party apps? ›Third-party app stores are the easiest way to install third-party APKs from outside the Google Play Store. Unfortunately, you'll need to install a third-party app store in order to do it, but after that, it's remarkably easy. Download the third-party app store of your choice and install it using the above method.
How do I add VPP apps to Intune? ›- Sign in to the Intune for Education portal.
- Click Apps.
- From the app list, under iOS Apps, click New app.
- Select the country/region from where you're purchasing the app.
- Type in the app's full or partial name. ...
- Select the app.
What is difference between Intune and SCCM? ›
Both solutions are parts of Microsoft Endpoint Manager – a single, integrated platform for managing all the endpoints in the organization. Intune is a cloud-based solution that allows you to manage company-owned and personal devices, while SCCM is a more traditional on-premises solution.
What is the difference between MAM and MDM Intune? ›MDM is a way of securing mobile devices such as smartphones and tablets, whereas MAM secures the applications on those devices that are used to access organizational data, such as Outlook, SharePoint, and OneDrive. MDM software is typically designed to support one or more operating systems such as iOS and Android.
What is the difference between MAM and MDM? ›MDM controls apps by controlling the device. MAM controls apps with specific features, such as a vendor-supplied app catalog, which customers typically can modify. MAM and MDM both provide app wrapping and app containerization features.
How do I add iOS app to company portal? ›- When prompted to open Company Portal, tap Open. ...
- Go to the Settings app and tap Enroll in < organization name > or Profile Downloaded. ...
- Tap Install.
- Enter your device password. ...
- The next screen is a standard system warning about device management. ...
- After installation is complete, tap Done.
Intune enables mobile device management (MDM) of iPads and iPhones to give users secure access to company email, data, and apps. As an Intune admin, you can set up enrollment for iOS/iPadOS and iPadOS devices to access company resources.
Why can't I find Microsoft Store in apps and features? ›If you don't find Microsoft Store in a search: Make sure you signed in to your Microsoft account on your device. The Store app may not be available if you're signed in to a local account. Check with your administrator if you're using a work device.
How do I enable Microsoft Store in services? ›Double-click the Microsoft Store option on the right-hand side. Navigate to the General tab. Check the Allow button to re-enable the Microsoft Store. Finally, press Apply and then press OK to apply these changes.
How do I install the Microsoft Store location? ›- Press Windows + I to open Settings.
- Select System. Click on Storage.
- Click on the link "Change where new content is saved."
- Under "New apps will save to:" change the drop down option to your desired location.
Sign in to the Microsoft Intune admin center. Select Apps > All apps > Add. In the Select app type pane, under the available Store app types, select iOS store app. Click Select.
How do I install Microsoft Store without Microsoft Store? ›You can download Microsoft Store apps from third-party websites like Adguard, which is the easiest and most recommended method. This website provides old versions of the Windows operating system, Microsoft Store apps, and more.
Why is my Microsoft Store not installed? ›
Try running the Windows Store apps Troubleshooter at Settings > Update & Security > Troubleshoot. Try resetting the Store cache: http://www.thewindowsclub.com/reset-windows-sto... If that fails go to Settings>Apps and highlight Microsoft Store, choose Advanced Settings, then Reset. After it resets, restart PC.
Why is my Microsoft Store not there? ›Make sure you're signed in to your Microsoft account. The Microsoft Store app may not be available if you're signed in to a local account. If you're using a work device, check with your administrator. The Microsoft Store app might have been turned off.