How to Deploy Applications via Microsoft Intune

Application deployment is a core capability of Microsoft Intune, enabling organizations to ensure users have the software they need while maintaining control over what applications are installed on managed devices. This guide covers deploying various application types across Windows, macOS, iOS, and Android platforms.

Overview

Intune supports various application types for different platforms and scenarios:

Prerequisites

Before deploying applications, ensure you have:

Licensing Requirements:

• Microsoft Intune license
• Appropriate software licenses for deployed applications

Administrative Access:

• Intune Administrator role or custom role with app management permissions
• Access to Microsoft Intune admin center (intune.microsoft.com)

Technical Requirements:

• Devices enrolled in Intune
• Microsoft Intune Management Extension installed (Windows - auto-installs)
• App installation files or store access

Tools:

• Microsoft Win32 Content Prep Tool (for Win32 apps)
• Application installers (MSI, EXE, DMG, PKG, etc.)

Method 1: Deploy Win32 Applications (Windows)

Win32 apps provide the most flexibility for Windows application deployment.

Step 1: Prepare the Win32 App Package

First, download the Microsoft Win32 Content Prep Tool:

1. Download from: https://github.com/Microsoft/Microsoft-Win32-Content-Prep-Tool

2. Extract the tool to a folder (e.g., C:\IntuneTools\)

3. Create a source folder for your application:

   • Create folder: C:\IntuneApps\AppName\
   • Copy installer files (MSI or EXE) to this folder
   • Include any additional files needed for installation

4. Open Command Prompt as Administrator

5. Navigate to the tool folder:

   cd C:\IntuneTools
   

   Copy

6. Run the content prep tool:

   IntuneWinAppUtil.exe -c "C:\IntuneApps\AppName" -s "setup.msi" -o "C:\IntuneApps\Output"
   

   Copy

   Parameters:

   • -c: Source folder containing the installer
   • -s: Setup file name (the main installer)
   • -o: Output folder for the .intunewin file

7. The tool creates an .intunewin file in the output folder

Step 2: Add the Win32 App to Intune

1. Sign in to the Microsoft Intune admin center: https://intune.microsoft.com

2. Navigate to Apps > Windows

3. Click Add

4. In the Select app type pane, choose Windows app (Win32)

5. Click Select

Step 3: Configure App Information

1. Click Select app package file

2. Browse and select your .intunewin file

3. Click OK

4. Configure app information:

5. Upload an icon (optional but recommended)

6. Click Next

Step 4: Configure Program Settings

Configure installation and uninstallation commands:

Install command:

msiexec /i "AcroRead.msi" /qn ALLUSERS=1

Common install command examples:

Uninstall command:

msiexec /x "{ProductCode}" /qn

Additional settings:

Click Next

Step 5: Configure Requirements

Set minimum requirements for installation:

Operating system architecture:

• 32-bit and 64-bit: Install on both architectures
• 32-bit: Only 32-bit Windows
• 64-bit: Only 64-bit Windows

Minimum operating system:

• Select minimum Windows version (e.g., Windows 10 1903)

Additional requirement rules (optional):

Click Add to create custom requirements:

Click Next

Step 6: Configure Detection Rules

Detection rules determine if the app is already installed:

Select Rules format:

• Manually configure detection rules (recommended)
• Use a custom detection script

Add detection rule:

MSI Detection Example:

1. Click Add
2. Rule type: MSI
3. MSI product code: Enter GUID from installer
4. MSI product version check: No (or specify version)

File Detection Example:

1. Click Add
2. Rule type: File
3. Path: %ProgramFiles%\Adobe\Acrobat Reader DC\Reader
4. File or folder: AcroRd32.exe
5. Detection method: File or folder exists
6. Associated with 32-bit app: No (or Yes for 32-bit)

Click Next

Step 7: Configure Dependencies (Optional)

Add apps that must be installed before this app:

1. Click Add under Dependencies

2. Select dependent app from your existing Win32 apps

3. Configure:

   • Automatically install: Yes (install dependency automatically)
   • Dependency: The app that must be installed first

Example: Microsoft Visual C++ Redistributable before an application

Click Next

Step 8: Configure Supersedence (Optional)

Replace older versions of the app:

1. Click Add under Supersedence

2. Select the app to replace

3. Configure:

   • Supersede: Yes
   • Uninstall previous version: Yes (recommended)

This enables automated app updates

Click Next

Step 9: Assign the Application

Configure who receives the app:

Required:

• App installs automatically
• Click Add group and select target groups
• Or Add all users / Add all devices

Available for enrolled devices:

• App appears in Company Portal for users to install
• Click Add group and select target groups

Available with or without enrollment:

• App available without full device enrollment
• For MAM-only scenarios

Uninstall:

• Removes app from selected groups
• Useful for license management or app retirement

Filter:

• Apply assignment filters for granular targeting

Click Next, review settings, and click Create

Method 2: Deploy Microsoft Store Apps

Microsoft Store apps provide automatic updates and simplified deployment.

Deploy from Microsoft Store for Business

1. Navigate to Apps > Windows

2. Click Add > Microsoft Store app (new)

3. Click Search the Microsoft Store app (new)

4. Search for the app (e.g., "Microsoft Whiteboard")

5. Select the app and click Select

6. Configure app information (name, description, category)

7. Click Next

8. Assign to groups (Required or Available)

9. Review and click Create

Microsoft Store App Limitations

Method 3: Deploy Microsoft 365 Apps

Deploy the Microsoft 365 suite with customized settings.

Step 1: Add Microsoft 365 Apps

1. Navigate to Apps > Windows

2. Click Add

3. Select Microsoft 365 Apps > Windows 10 and later

4. Click Select

Step 2: Configure App Suite

1. Under Configure app suite, select applications to include:

   • Microsoft Excel
   • Microsoft Outlook
   • Microsoft PowerPoint
   • Microsoft Word
   • Microsoft Teams
   • (Additional apps as needed)

2. Click Next

Step 3: Configure App Suite Settings

Additional Properties:

• Accept EULA on behalf of users: Yes
• Use shared computer activation: No (unless needed)

Click Next

Step 4: Assign Microsoft 365 Apps

1. Assign to user or device groups

2. Required: Automatic installation

3. Available: Users install from Company Portal

4. Review and create

Method 4: Deploy macOS Applications

Deploy DMG Applications

1. Navigate to Apps > macOS

2. Click Add > macOS app (DMG)

3. Select app package file: Upload your .dmg file

4. Configure app information:

   • Name, description, publisher
   • Category and icon

5. Click Next

6. Assign to device groups (Required or Available)

7. Review and create

Deploy PKG Applications

1. Navigate to Apps > macOS

2. Click Add > macOS app (PKG)

3. Select app package file: Upload your .pkg file

4. Configure:

   • Pre-install script (optional)
   • Post-install script (optional)
   • Detection rules

5. Configure app information

6. Assign and create

macOS App Detection

For PKG apps, configure detection rules:

Method 5: Deploy iOS/iPadOS Applications

Deploy from App Store

1. Navigate to Apps > iOS/iPadOS

2. Click Add > iOS store app

3. Click Search the App Store

4. Search for and select the app

5. Configure app information

6. Assign:

   • Required: Auto-install (supervised devices only)
   • Available: User installs from Company Portal

7. Create the app

Deploy Managed App Store Apps (VPP)

For volume-purchased apps:

1. Ensure Apple Business Manager is configured with Intune

2. Purchase apps through ABM

3. Sync ABM with Intune (Connectors > Apple VPP Tokens)

4. VPP apps appear automatically in Intune

5. Assign VPP apps with device licensing (no Apple ID required)

Method 6: Deploy Android Applications

Deploy Managed Google Play Apps

1. Navigate to Apps > Android

2. Click Add > Managed Google Play app

3. Search for the app in Google Play

4. Click Approve > Approve

5. Configure approval settings (keep approved when new permissions requested)

6. Click Sync

7. The app appears in your Intune apps list

8. Assign to user or device groups

Android App Assignment Types

Monitoring App Deployments

Check App Installation Status

1. Navigate to Apps > Monitor > App install status

2. Review installation statistics:

   • Installed
   • Failed
   • Pending
   • Not applicable

3. Click on an app to see detailed status per device

Troubleshoot Installation Failures

1. Navigate to Devices > All devices

2. Select the failing device

3. Go to Managed Apps or App install status

4. Review error codes and messages

Common Error Codes

Review Installation Logs

On Windows devices, check:

• C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.log
• Event Viewer: Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider

Best Practices

App Packaging

1. Test installers locally first: Verify silent installation works
2. Use consistent parameters: Document all silent install switches
3. Include prerequisites: Bundle dependencies or use dependency feature
4. Version control: Maintain installer packages in source control
5. Create robust detection rules: Use multiple detection methods if needed

Deployment Strategy

1. Use pilot groups: Test deployments with IT staff first
2. Stagger deployments: Don't deploy to all users simultaneously
3. Set appropriate schedules: Consider business hours for large apps
4. Monitor deployment progress: Watch installation status reports
5. Plan for failures: Have remediation process ready

App Lifecycle Management

1. Regular updates: Use supersedence for app updates
2. License tracking: Monitor app assignment vs. license count
3. Remove unused apps: Uninstall apps no longer needed
4. Document configurations: Keep records of install commands and settings
5. Review app catalog: Periodically audit deployed applications

Troubleshooting

App Not Installing (Win32)

Symptoms: App shows pending but never installs.

Solutions:

1. Verify device has Intune Management Extension
2. Check disk space requirements
3. Review installation logs
4. Verify install command syntax
5. Check if app requires user interaction (use /qn for silent)
6. Restart Intune Management Extension service

Detection Rules Not Working

Symptoms: App shows as not installed but is present.

Solutions:

1. Verify file path is correct (including 32-bit vs 64-bit paths)
2. Check registry path and value name
3. Run detection logic manually on device
4. Use multiple detection rules for reliability
5. Consider using version detection instead of existence

Microsoft 365 Installation Fails

Symptoms: Office installation fails or incomplete.

Solutions:

1. Remove existing Office installations first
2. Check for Office Click-to-Run conflicts
3. Verify network connectivity to Office CDN
4. Review Office deployment logs: %temp%\Setup*.log
5. Try removing and re-adding assignment

Store App Not Appearing

Symptoms: Store app not visible in Company Portal.

Solutions:

1. Verify app is assigned to user's group
2. Check Windows Store service is running
3. Sync device manually
4. Verify Microsoft Store for Business configuration
5. Check user has valid license

Next Steps

After deploying applications:

1. Configure app protection policies: Protect data in managed apps
2. Set up app configuration: Pre-configure app settings
3. Monitor compliance: Track required app installation
4. Plan updates: Establish app update cadence
5. User communication: Inform users about available apps

Additional Resources

• Add Apps to Microsoft Intune
• Win32 App Management
• Microsoft 365 Apps Deployment
• Troubleshooting App Installation

Need help with your Intune app deployment strategy? InventiveHQ offers comprehensive application management services, from packaging to deployment automation. Contact us for a free consultation.