Add Microsoft Store apps to Microsoft Intune (2023)

  • Article
  • 8 minutes to read

Admins can browse, deploy, and monitor Microsoft Store applications inside Intune. Upon deployment, Intune automatically keeps the apps up to date when a new version becomes available. The Microsoft Store supports UWP apps, desktop apps packaged in .msix, and now Win32 apps packaged in .exe or .msi installers.

Important

There are key improvements to the most recent Microsoft Store apps functionality over legacy functionality.Specifically, the following differences:

  • You can browse and search for store apps within Intune
  • You can install and uninstall with required app deployments
  • You can monitor the installation progress and results for store apps
  • Win32 store apps are supported (in preview)

Prerequisites

To use Microsoft Store apps, be sure the following criteria are met:

(Video) How to publish microsoft store for business apps to Intune

  • Client devices must support at least two core processors to successfully install and run Microsoft Store apps.
  • Client device need to be able to support the Intune Management Extension (IME) to install Microsoft Store apps.
  • Client device need access to the Microsoft Store and the destination content to install Microsoft Store apps.

Add and deploy a Microsoft Store app

Use the following steps to add and deploy a Microsoft Store app.

Step 1: Add an app from the Microsoft Store

  1. In the admin portal, select Apps > All apps > Add.
  2. In Select app type pane, select Microsoft Store app (new) under the Store app section.
  3. Choose Select at the bottom of the page to begin creating an app from the Microsoft Store.The app creation experience has three steps:
    • App information
    • Assignments
    • Review + create

Step 2: Search the Microsoft Store

The Microsoft Store provides a large variety of apps designed to work on your Microsoft devices. Within Intune, you can search and add the apps you want to assign to your workforce at your organization.

  1. Select Search the Microsoft Store app to display the search panel which features a search bar and includes the following columns:

    • Name – The name of the app.
    • Publisher – The publisher of the app.
    • Type – The app package type: Win32 or Universal Windows Platform (UWP).
  2. In the search bar, type the name of the app that you want to find. You can also search by other app details, such as publisher, type, or store app ID.Once you search, a list of apps are displayed.

    Note

    Specific Microsoft Store apps may not be displayed and available in Intune. Common reasons an app doesn't appear when searching within Intune include the following:

    (Video) How to deploy Microsoft Store Apps using Microsoft Intune | Deploy Windows Store Apps via Intune

    • The app is not available in your region
    • The app is not available if there is an age restriction
    • The app is a paid app, which is not supported
    • The app is an Android app
    • The app is a Microsoft Store for Business app that is not available publicly in the consumer store
  3. Choose the app that you want to deploy and click Select.The app information is presented with the selected app’s metadata. Specific fields are pre-populated.

    The following table shows the fields that are supported:

    Name of the fieldDescriptionRequired
    NameThe name of the app is pre-populated from the store’s metadata and you have the choice to edit the field. Enter the name of the app as it appears in the Company Portal. Make sure all app names that you use are unique. If the same app name exists twice, only one of the apps appears in the company portal.Required
    DescriptionThe description of the app is pre-populated from the store’s metadata and you have the choice to edit the field. The description appears in the Company Portal.Required
    PublisherThe publisher of the app is pre-populated from the store’s metadata and you have the choice to edit the field.Required
    Installer TypeThe installer type of the application package is distinguished by either the UWP or Win32 installer types. For related information, see Universal Windows Platform (UWP) apps.N/A Pre-filled
    Package IdentifierThe app’s unique ID in the Microsoft Store. This value is read-only and is displayed before Installer Type in the UI.N/A Pre-filled
    Install behaviorThe install behavior of the app. If the app to be installed has the option of either System or User install behaviors, you must ensure that the installation works on devices as expected. NOTE: If the option is greyed out, the specific store application only supports the selected install behavior.Admin must select System or User
    CategoryOptionally, select one or more of the built-in app categories, or select a category that you created. Categories make it easier for users to find the app when they browse through the Company Portal.Optional
    Show this as a featured app in the Company PortalDisplay the app prominently on the main page of the company portal when users browse for apps.Admin must select Yes or No
    Information URLOptionally, enter the URL of a website that contains information about this app. The URL appears in the company portal.Optional
    Privacy URLOptionally, enter the URL of a website that contains privacy information for this app. The URL appears in the company portal.N/A Pre-filled
    DeveloperOptionally, enter the name of the app developer.Optional
    OwnerOptionally, enter a name for the owner of this app. An example is HR department.Optional
    NotesEnter any notes that you want to associate with this app.Optional
    LogoUpload an icon that is associated with the app. This icon is displayed with the app when users browse through the company portal.Optional
  4. Select Next after you have finished populating the fields.

Step 3: Creating assignments

You can choose how you want to assign Microsoft Store apps to users and devices.

The following table provide assignment type details:

Assignment typeAssignment optionsDescription
RequiredAdd group, Add all users, Add all devicesThe app is installed on devices in the selected groups.
Available for enrolled devicesAdd group, Add all usersUsers install the app from the Company Portal app or the Company Portal website.
UninstallAdd group, Add all users, Add all devicesThe app is uninstalled from devices in the selected groups.
  1. Select Add group and assign the groups that will use this app.
  2. On the Select groups pane, select groups to assign based on users or devices.
  3. After you select your groups, choose whether to set End user notifications, Restart grace period, and Installation deadline.
  4. If you don't want the app assignment to affect groups of users, select Included under the Filter mode column. In the Edit assignment pane, change the Filter mode value from Included to Excluded. Select OK to close the Edit assignment pane.
  5. Select Next to display the Review + create page after you finish setting the assignments for the apps.

Step 4: Review and create

  1. Review the values and settings that you entered for the app. Verify that you configured the app information correctly.
  2. Select Create to add the app to Intune.

App update

Apps that are deployed from the Microsoft Store are automatically kept up to date to the latest version of the app. For this feature to work properly for UWP apps, the Turn off Automatic Download and Install of updates should not be enabled.

Microsoft Store Win32 apps

Important

Win32 apps that are in the Microsoft Store are currently in preview. Not all Win32 apps will be available or searchable. The Win32 apps that are in preview will be identifiable with Win32 and a banner.

Third party vendors or publishers that add Win32 apps to the Microsoft Store are responsible for hosting their own content in their respective infrastructure. If your devices are behind a firewall, please reach out to application owner to understand and confirm network requirements.

(Video) Deploy Windows Store Apps via Intune

Intune management of Microsoft Store Win32 apps

When a Microsoft Store Win32 app is published to a device as Required, but it is already installed (either manually or via the Microsoft Store for Business), Intune will take over the management of the application.

For available Microsoft Store Win32 apps, as well as UWP apps, the end user must click install in the Company Portal before Intune takes over the management of the application. Intune will not attempt to re-install the app.

The Microsoft Store supports Win32 app types including .exe and .msi installers. These apps have external content sourcing hosted by the app publisher. Based on their installer definition in the store, each Win32 app supports either User or System context installation.For related information, see Traditional desktop apps in the Microsoft Store on Windows.

Store group policies restrictions

Some Store Group Policies may affect app deployments from the Microsoft Store.

(Video) Microsoft Intune Microsoft Store App (New) Deployment | Add Microsoft Store apps to Microsoft Intune

The following table provides details about how app deployment may be affected by Store Group Policies:

Store Group PoliciesDesired setting
Store\Disable all apps from the Microsoft StoreNot configured or Disabled. Set to Disabled if wish to prevent end users from blocking the scenario.
Store\Turn off Automatic Download and Install of updatesNot configured or Disabled. Set to Disabled if you need to prevent end users from blocking the scenario.
Desktop App Installer\Enable App Installer Microsoft Store SourceNot configured or Enabled. Set to Enabled if wish to prevent end users from blocking the scenario.
Desktop App Installer\Enable App InstallerNot configured or Enabled. Set to Enabled if wish to prevent end users from blocking the scenario.
Store\Turn off the Store applicationNot configured or Disabled. Set to Disabled if you need to prevent end users from blocking the scenario.

Note

If you would like to block installation of arbitrary applications from the Store application by the end user without blocking the Intune and Windows Package Manager store integration, set Store\Only display the private store within the Microsoft Store to Enabled.

Unsupported functionality for Microsoft Store apps

The following capabilities aren't supported by Microsoft Store apps:

  1. Ability to install Microsoft Store apps during Enrollment Status Page. Apps deployed using Microsoft Store app will install after enrollment status page has completed.
  2. Device provisioning of Microsoft Store Universal Windows Platform (UWP) applications are not supported.
  3. Any app that has an ARM64 installer is not supported.

The ability to install Microsoft Store apps during Enrolment Status Page and device provisioning of Microsoft Store Universal Windows Platform (UWP) applications is coming in a future release.

Next steps

  • Assign apps to groups

FAQs

How do I add Microsoft Store app to Intune? ›

In the admin portal, select Apps > All apps > Add. In Select app type pane, select Microsoft Store app (new) under the Store app section. Choose Select at the bottom of the page to begin creating an app from the Microsoft Store.

How do I sync Microsoft Store for Business with Intune? ›

Link Intune to Microsoft Store for business

Navigate to your favorite URL https://devicemanagement.microsoft.com (which is bookmarked offoucrse). Click 'Client Apps' and choose 'Microsoft Store for Business near the bottom. You will now navigate to the Microsoft Store for Business (MSfB) setup screen within Intune.

Which app stores are supported in Intune? ›

Intune supports available apps from Managed Google Play store on Android Enterprise devices.

How do I deploy Microsoft Store Apps? ›

Go to the Microsoft Intune admin center. In the Managed Desktop pane, select Apps. In the Apps workload section, select the app you want to assign users to, and select Assign users groups. For the specific app, select an assignment type (Available, Required, Uninstall) and assign the appropriate group.

How do I add Apps to Microsoft company portal? ›

Install apps
  1. Open the Company Portal app and sign in with your work or school account.
  2. Find and install apps from any of the following sections of the Company Portal app: Home: Select from a list of your organization's featured apps. ...
  3. Select an app.
  4. On the apps details page, click Install.
Sep 16, 2022

How do I link to my Microsoft Store app? ›

To get the URL for your app's Store listing, navigate to the app's Product Identity identity page in the Product management section of Partner Center. The URL is in the format https://apps.microsoft.com/store/detail/<your app's Store ID> .

How do I sync apps with Intune? ›

Sign in to the Microsoft Intune admin center. Select Devices > All devices. In the list of devices you manage, select a device to open its Overview pane, and then select Sync. To confirm, select Yes.

How do I distribute an app with Intune? ›

Deploying the app
  1. In MEM, navigate to Apps > Windows > + Add and choose the app type Windows app (Win32). ...
  2. You configure the Win32 application using the add app wizard. ...
  3. After selecting the file, you populate the files of app metadata. ...
  4. On the program page, you need to enter install and uninstall commands for your app.
Mar 24, 2021

How do I import to Intune? ›

Add devices

Save the CSV file. Sign in to the Microsoft Intune admin center, and go to Devices > Windows > Windows Enrollment. Under Windows Autopilot Deployment Program, select Devices. Select Import.

Does Intune support 3rd party apps? ›

Select the required third-party application that you wish to create in Intune/MEM, customize the deployment with pre/post scripts if required, and click 'Create Application' option. Now, you can see that the selected third-party application is created in the Apps section under Client Apps.

Can Intune manage third party apps? ›

If your Organization uses Microsoft Intune along with SCCM, or Microsoft Endpoint Manager, you can use Application Management for Intune/MEM in Patch Connect Plus to select the third party applications.

How do I add apps to Intune iOS? ›

Sign in to the Microsoft Intune admin center. Select Apps > All apps > Add. In the Select app type pane, under the available Store app types, select iOS store app. Click Select.

Why I Cannot install apps from Microsoft Store? ›

If updates for Windows were recently installed, you'll need to restart your PC before you can install apps from Microsoft Store. Your PC isn't authorized to use Microsoft Store apps. You'll need to sign into the app with your Microsoft account.

How do I add Microsoft Store app to SCCM? ›

Deploy Microsoft Store Apps using SCCM
  1. Launch Admin Console.
  2. Navigate to \Software Library\Overview\Application Management\Applications.
  3. Select an application called Company Portal.
  4. Click on the Deployment Types tab.
May 15, 2022

How do I install apps from the outside of Microsoft Store? ›

Click on Update & security. Click on For developers on the left panel. Switch on Install apps from any source including loose files option. Click Yes to confirm the risks involved in running an app outside the Windows Store.

Who can add Apps to Microsoft Store for Business? ›

Admins can assign online-licensed apps to people in their organization. Admins can configure a mobile device management (MDM) tool to synchronize your Microsoft Store inventory. Microsoft Store management tool services work with MDM tools to manage content. Offline licensing is a new licensing option for Windows 10.

Can Apps be added to Portal? ›

Note that you can download apps onto your Portal at any time by going to the Home section and selecting Apps, which will allow you to easily search and download apps you are interested in.

Can you assign Apps to devices that are not enrolled with Microsoft Intune? ›

You cannot assign apps to devices that are not enrolled with Intune. You can assign wrapped apps or apps that incorporate the Intune SDK to devices that are not enrolled with Intune.

Do you need a Microsoft account to download Apps from the Microsoft Store? ›

If you're running Windows 11 or Windows 10, you can download and install some of the apps from the Microsoft Store by using a local account. That's great news for everyone who doesn't want to use the cloud and syncing features that come with signing into a Microsoft account.

How do I remove Microsoft Store for Business app from Intune? ›

Disable the Microsoft Store for Business Intune Connector
  1. Select Manage / Settings.
  2. Select the tab Distribute and click Deactivate on the Management tools Microsoft Intune.
Dec 16, 2022

Can Microsoft Intune see my apps? ›

On personal devices, your organization can only see your managed app inventory, which includes work and school apps. On corporate-owned devices, your organization can see all apps installed on the device.

How do I add apps to sync? ›

How to Add SYNC 3 Apps
  1. Step 1: Make sure your phone is paired and connected to SYNC. ...
  2. Step 2: Open your chosen app and have it running on your smartphone.
  3. Step 3: Press the Apps icon on your SYNC Feature bar, and select the app you wish to use.

How do I manage apps in Intune company portal? ›

To do this, navigate to Microsoft Intune admin center, and select Tenant Administration > Customization, where you can either edit the default policy or create up to 10 group targeted policies. These settings will apply to the Company Portal apps, Company Portal website, and Intune app on Android.

How do I create an Intune app package? ›

Click Microsoft Intune -> Client Apps blade. Click on Apps and then click on “+Add.” From the Add app blade – Select the options called “Windows App (Win32)” from the drop-down list to upload the IntuneWin package. From App Package File Blade, Browse and select the IntuneWin package you want to upload (created above).

Where does Intune store install files? ›

User can see an intuitive notice in the device that indicates that the app is downloading and installing. Download job is created and timer is set. Content is downloaded to C:\Program Files (x86)\Microsoft Intune Management Extension\Content\Incoming\59f9a567-b92d-4dc2-9c7a-fdb94e29275c_1.

How do I bulk import devices into Intune? ›

Let's learn how to Import Bulk Devices to AAD Group for Intune Management.
...
Log in to the Microsoft Endpoint Manager admin center portal https://endpoint.microsoft.com.
  1. You can navigate to Groups > All groups.
  2. Open the Azure AD Group that you want to import devices to.
  3. Navigate to Bulk operations > Import members.
Jul 15, 2022

How do I migrate to Microsoft Intune? ›

To migrate a user and their devices to Intune from Basic Mobility and Security, follow these steps:
  1. Enable coexistence. ...
  2. Sign in to the Microsoft Intune admin center with Azure AD Global or License administrator rights.
  3. Assign Intune licenses to the users you want to migrate by using Users or Groups:
Feb 22, 2023

Can Intune deploy apps? ›

Microsoft Intune supports a variety of app types and deployment scenarios on Windows 10 devices. After you've added an app to Intune, you can assign the app to users and devices.

Can I install 3rd party apps? ›

Third-party app stores are the easiest way to install third-party APKs from outside the Google Play Store. Unfortunately, you'll need to install a third-party app store in order to do it, but after that, it's remarkably easy. Download the third-party app store of your choice and install it using the above method.

How do I add VPP apps to Intune? ›

Search and add apps
  1. Sign in to the Intune for Education portal.
  2. Click Apps.
  3. From the app list, under iOS Apps, click New app.
  4. Select the country/region from where you're purchasing the app.
  5. Type in the app's full or partial name. ...
  6. Select the app.
Jul 24, 2020

What is difference between Intune and SCCM? ›

Both solutions are parts of Microsoft Endpoint Manager – a single, integrated platform for managing all the endpoints in the organization. Intune is a cloud-based solution that allows you to manage company-owned and personal devices, while SCCM is a more traditional on-premises solution.

What is the difference between MAM and MDM Intune? ›

MDM is a way of securing mobile devices such as smartphones and tablets, whereas MAM secures the applications on those devices that are used to access organizational data, such as Outlook, SharePoint, and OneDrive. MDM software is typically designed to support one or more operating systems such as iOS and Android.

What is the difference between MAM and MDM? ›

MDM controls apps by controlling the device. MAM controls apps with specific features, such as a vendor-supplied app catalog, which customers typically can modify. MAM and MDM both provide app wrapping and app containerization features.

How do I add iOS app to company portal? ›

Secure entire device
  1. When prompted to open Company Portal, tap Open. ...
  2. Go to the Settings app and tap Enroll in < organization name > or Profile Downloaded. ...
  3. Tap Install.
  4. Enter your device password. ...
  5. The next screen is a standard system warning about device management. ...
  6. After installation is complete, tap Done.
Feb 21, 2023

Does Microsoft Intune work with iOS? ›

Intune enables mobile device management (MDM) of iPads and iPhones to give users secure access to company email, data, and apps. As an Intune admin, you can set up enrollment for iOS/iPadOS and iPadOS devices to access company resources.

Why can't I find Microsoft Store in apps and features? ›

If you don't find Microsoft Store in a search: Make sure you signed in to your Microsoft account on your device. The Store app may not be available if you're signed in to a local account. Check with your administrator if you're using a work device.

How do I enable Microsoft Store in services? ›

Double-click the Microsoft Store option on the right-hand side. Navigate to the General tab. Check the Allow button to re-enable the Microsoft Store. Finally, press Apply and then press OK to apply these changes.

How do I install the Microsoft Store location? ›

How to change location of microsoft store apps
  1. Press Windows + I to open Settings.
  2. Select System. Click on Storage.
  3. Click on the link "Change where new content is saved."
  4. Under "New apps will save to:" change the drop down option to your desired location.
Jun 17, 2021

How do I add Apps to intune iOS? ›

Sign in to the Microsoft Intune admin center. Select Apps > All apps > Add. In the Select app type pane, under the available Store app types, select iOS store app. Click Select.

How do I install Microsoft Store without Microsoft Store? ›

You can download Microsoft Store apps from third-party websites like Adguard, which is the easiest and most recommended method. This website provides old versions of the Windows operating system, Microsoft Store apps, and more.

Why is my Microsoft Store not installed? ›

Try running the Windows Store apps Troubleshooter at Settings > Update & Security > Troubleshoot. Try resetting the Store cache: http://www.thewindowsclub.com/reset-windows-sto... If that fails go to Settings>Apps and highlight Microsoft Store, choose Advanced Settings, then Reset. After it resets, restart PC.

Why is my Microsoft Store not there? ›

Make sure you're signed in to your Microsoft account. The Microsoft Store app may not be available if you're signed in to a local account. If you're using a work device, check with your administrator. The Microsoft Store app might have been turned off.

Videos

1. Intune Training Series #13 || Configure Microsoft Store for Bussiness and Deploy Applications Intune
(Paddy Maddy)
2. NEW INTUNE FEATURE - Windows Store Winget Intune Integration
(CloudManagement.Community)
3. Windows App Store and Winget Integration Intune | Add Microsoft Store Apps (New) Winget to Intune
(@Chander Mani Pandey)
4. Microsoft Endpoint Manager: Integrate Microsoft Store for Business
(Hashmat IT Solution)
5. Enable/Setup Microsoft Store for Business in Intune - Create your own Intune lab (7/15)
(Intune & Vita Doctrina)
6. Deploying apps via Intune? Do this!
(CloudManagement.Community)

References

Top Articles
Latest Posts
Article information

Author: The Hon. Margery Christiansen

Last Updated: 14/09/2023

Views: 5776

Rating: 5 / 5 (50 voted)

Reviews: 89% of readers found this page helpful

Author information

Name: The Hon. Margery Christiansen

Birthday: 2000-07-07

Address: 5050 Breitenberg Knoll, New Robert, MI 45409

Phone: +2556892639372

Job: Investor Mining Engineer

Hobby: Sketching, Cosplaying, Glassblowing, Genealogy, Crocheting, Archery, Skateboarding

Introduction: My name is The Hon. Margery Christiansen, I am a bright, adorable, precious, inexpensive, gorgeous, comfortable, happy person who loves writing and wants to share my knowledge and understanding with you.