Deploying Apps from Microsoft Store, Apple App Store, and Google Play Using Intune

In-Depth Guide: Deploying Platform Store Apps with Microsoft Intune

Intune lets you deploy store-based applications directly to managed devices. You can search the Microsoft Store, Apple App Store, or Google Play within the Intune console, assign apps to users or devices, and let Intune manage updates. This guide covers supported app types, prerequisites, deployment steps, and platform-specific nuances.

1. Deploying Microsoft Store Apps on Windows

1.1 Supported App Types

• Universal Windows Platform (UWP) apps
• Win32 apps packaged for the Microsoft Store (via the Store’s new Win32 integration)

1.2 Prerequisites

• Devices must be Azure AD–joined or hybrid–Azure AD–joined
• Windows 10 version 1809 or later for Win32 Store integration
• Intune licensing and permissions to add store apps

1.3 Deployment Steps

1. In the Intune Admin Center, go to Apps → All apps → Create app.
2. Choose Store app, then select Microsoft Store app (new).
3. Sign in to the Microsoft Store for Business or Education if prompted.
4. Search for the app by name or browse categories.
5. Select Next, then set Assignment type:
   1. Required: Installs automatically.
   1. Available for enrolled devices: Appears in Company Portal.
   1. Uninstall: Removes the app from targeted devices.
6. Choose Install context:
   1. System: Installs for all users.
   1. User: Installs only when the user signs in.
7. Review settings and click Create.

1.4 Update Management and Limitations

• Intune automatically syncs with the Microsoft Store to deliver updates.
• Limitations: Paid apps and ARM64 packages are not supported. Enrollment Status Page installations are unavailable.

2. Deploying Apple App Store Apps on iOS/iPadOS and macOS

2.1 Supported App Types

• Public App Store apps
• Volume-purchased apps via Apple Business Manager (ABM) or Apple School Manager (ASM)

2.2 Prerequisites

• An ABM or ASM account with a valid Volume Purchase Program (VPP) token uploaded to Intune.
• Devices enrolled in Intune MDM or devices that support MAM for unenrolled scenarios.
• Apple IDs linked to VPP tokens for license assignment.

2.3 Deployment Steps

1. In Intune Admin Center, navigate to Apps → iOS/iPadOS apps → Add (or macOS apps → Add).
2. Select iOS store app or macOS store app.
3. Search by app name, bundle ID, or App Store URL.
4. Click Select and configure Assignments:
   1. Required: Automatically installs.
   1. Available: Users install via Company Portal.
   1. Uninstall: Removes the app where assigned.
5. Choose License type:
   1. Device-based: Uses ABM device licenses.
   1. User-based: Uses VPP user licenses.
6. Review and click Add.

2.4 Update Management and Limitations

• App updates depend on Apple’s App Store mechanisms; Intune cannot force updates.
• Only publicly available apps or privately published VPP apps can be deployed.

3. Deploying Google Play Store Apps on Android

3.1 Supported App Types

• Public Play Store apps
• Private, managed Google Play apps (custom LOB apps)

3.2 Prerequisites

• Android Enterprise tenant configuration in Intune.
• A managed Google Play account linked to Intune.
• Devices enrolled through Android Enterprise (Work Profile or Fully Managed).

3.3 Deployment Steps

1. In Intune Admin Center, go to Apps → Android apps → Add.
2. Choose Store app then select Managed Google Play app.
3. Click Approve to open the managed Google Play iframe.
4. Search for the app, then click Approve and Sync.
5. Back in Intune, configure Assignments:
   1. Required, Available, or Uninstall.
6. Select Device groups (Work profile or device enrollment).
7. Review and click Add.

3.4 Update Management and Limitations

• Intune manages approval and distribution; Google Play handles app updates.
• Apps must be approved in managed Google Play before assignment.
• Requires Android Enterprise; legacy device admin enrollment is not supported.

4. Best Practices and Exam Tips

• Always verify licensing and tenant connections (Store for Business, ABM, Google Play).
• Use Required assignments for critical corporate apps and Available for optional utilities.
• Test deployments on pilot devices before broad rollout.
• Understand each store’s update cadence and limitations on forcing updates.
• For Win32 apps, consider using Win32 packaging for apps not in the Microsoft Store.
• On iOS/macOS, manage VPP tokens and monitor license consumption in Intune.

Deploying store apps through Intune streamlines app management across diverse platforms. Following this guide ensures reliable delivery, consistent user experiences, and alignment with enterprise policies.