#Manage Apps

On the Apps page, all apps within the tenant are listed in the table with their basic information. Click Refresh to view the latest app list.

You can also click Export to export the report of apps.

To delete an app, select the app and click Delete. Click OK in the confirmation window to confirm the deletion. The app will no longer be viewed or managed from either Elements or the Intune portal.

Click an app of which the name is in bold to access the App details page. On the top of the page, you can view the app name, type, and created time. There are several tabs on this page:

• Basics – In this tab, the essentials, device status, user status, scope tags, and app information can be viewed.

  The values of the editable fields are highlighted in light blue. Click the pencil button in an editable field to edit the corresponding information.

• App settings – In this tab, the app settings can be viewed. You can also change the language for the app as required.

  NOTE

  This tab is only available for apps of the Microsoft Edge (Windows 10 and later) type.

• Assignments – In this tab, you can view and manage the app assignments.

  • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

  • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

  • Available with or without enrollment – Select the groups for which you want to make this app available with or without enrollment. Apps with this assignment are displayed in the Company Portal app and website for users to optionally install without requiring the device to be enrolled.

  • Uninstall – The app is uninstalled from devices in the selected groups if Intune has previously installed the application onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

  Assign the app to users and devices by the following actions:

  • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add.

  • Add all users – Click Add all users to assign this app to all users.

  • Add all devices – Click Add all devices to assign this app to all devices.

• Device install status – This tab shows a device status list. The following information is available in the table, including the name of the device on platforms that allow naming a device, the name of the user, the operating system of the device, the version number of the app, the status of the app, the details of the status, and the date of the device’s last sync with Intune. You can manage the columns displayed in the table and filter specific records by app status.

  Click Export all to export the device install status, or click Refresh to view the latest data in the table.

• User install status – The tab shows a user status list. The following information is available in the table, including the name of the user in Microsoft Entra ID, the unique name of the user, the number of failed app installations for the user, the number of apps installed by the user, the number of apps that are pending installation, the number of apps not installed by the user, and the number of apps that are not applicable. Click a user name to view the device and app information for the user. You can manage the columns displayed in the table and filter specific records by app status.

  Click Export all to export the user install status, or click Refresh to view the latest data in the table.

• Audit logs – In this tab, you can view all action records performed to the current app. You can click Refresh to view the latest audit logs, or click Export to export the audit logs into an Excel.

On the App details page of apps with the Windows app (Win32), macOS app (PKG), macOS app (DMG), or a line-of-business app type, you can click Update package file in the upper-right corner of the page to update the app package file is needed or edit the application. There are more tabs for Windows app (Win32) apps on the App details page.

You can delete an app by clicking Delete in the upper-right corner of the App details page.

To add a new app to this service, refer to the sections below.

#Add Microsoft Store apps (new)

Complete the following steps to add and deploy a Microsoft Store app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the Microsoft Store app (new) app type, and click Select.

3. In the App information step of the Add app page, click Search the Microsoft Store app (new) link. The Microsoft Store provides a large variety of apps designed to work on Microsoft devices. Enter keywords in the search box and press Enter to search for the app you want to add. Select the desired app and click Select.

4. The app information is presented with the selected app’s metadata. Specific fields are prepopulated. Edit the app information as required.

5. Click Next after you have finished populating the fields.

6. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

7. Click Next to go to the Assignments step.

8. Choose how you want to assign the app to users and devices.

   • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

   • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

   • Uninstall – The app is uninstalled from devices in the selected groups if the application has previously been installed onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

   Assign the app to users and devices by the following actions:

   • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

   • Add all users – Click Add all users to assign this app to all users.

   • Add all devices – Click Add all devices to assign this app to all devices.

9. Click Create to add the app and manage it by the device management service.

#Add a Microsoft Store app (legacy)

Complete the following steps to add and deploy a Microsoft Store app (legacy):

1. Click Create in the upper-right corner of the Apps page.

2. Select the Microsoft Store app (legacy) app type, and click Select.

3. In the App information step, add the app details.

4. Click Next after you have finished populating the fields.

5. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

6. Click Next to go to the Assignments step.

7. Choose how you want to assign the app to users and devices.

   • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

   Assign the app to users and devices by the following actions:

   • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

   • Add all users – Click Add all users to assign this app to all users.

8. Click Create to add the app and manage it by the device management service.

#Add a Windows app (Win32) app

Complete the following steps to add and deploy a Windows app (Win32) app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the Windows app (Win32) app type, and click Select.

3. In the App information step, click Select app package file.

4. In the App package file window, click Browse to browse to a Windows installation file with the extension .intunewin.

5. When you finish reviewing the app details, click Select.

6. Click Next after you have finished populating the fields.

7. In the Program step, configure the app installation and removal commands for the app.

   • Install command – Add the complete installation command line to install the app.

   • Uninstall command – Add the complete command line to uninstall the app based on the app's GUID.

   • Installation time required (mins) – The number of minutes the system will wait for install program to finish. The default value is 60 minutes. If the app takes longer to install than the configured installation time, the system will fail the app installation. The maximum timeout value is 1440 minutes (1 day).

   • Allow available uninstall – Enable this setting to provide the uninstall option for this app for users from the Company Portal or disable it to prevent users from uninstalling the app from the Company Portal.

   • Install behavior – Set the install behavior to either System or User.

   • Device restart behavior – Select one of the following options:

     • Determine behavior based on return codes – Select this option to restart the device based on the return codes, which means that the device will restart based on the configured return code. With this configuration, a hard reboot return code will immediately trigger a restart of the device, and a soft reboot return code will notify the user that a restart is required to finish the installation.

     • No specific action – Select this option to suppress device restarts during the app installation of MSI-based apps.

     • App install may force a device restart – Select this option to allow the app installation to finish without suppressing restarts, which means that the Win32 app installation is allowed to complete without suppressing restarts. With this configuration, a hard reboot return code will notify the user that a restart of the device will be triggered in 120 minutes, and a soft reboot return code will only notify the user that a restart is required to finish the installation.

     • Intune will force a mandatory device restart – Select this option to always restart the device after a successful app installation.

   • Specify return codes to indicate post-installation behavior – Add the return codes that are used to specify either app installation retry behavior or post-installation behavior. Return code entries are added by default during app creation. However, you can add more return codes or change existing return codes.

8. Click Next to go to the Requirements step.

9. In the Requirements step, specify the requirements that devices must meet before the app is installed:

   • Check operating system architecture – Choose the architectures needed to install the app.

   • Minimum operating system – Select the minimum operating system needed to install the app.

   • Disk space required (MB) – The free disk space needed on the system drive to install the app.

   • Physical memory required (MB) – The physical memory (RAM) required to install the app.

   • Minimum number of logical processors required – The minimum number of logical processors required to install the app.

   • Minimum CPU speed required (MHz) – The minimum CPU speed required to install the app.

   • Configure additional requirement rules – Configure additional requirement rules if needed by clicking Add requirement rule.

10. Click Next to go to the Detection rules step.

11. In the Detection rules step, configure the rules to detect the presence of the app.

    • Rules format – Select how the presence of the app will be detected.

      • You can choose to manually configure the detection rules by selecting Manually configure detection rules and clicking Add detection rule.

      • Alternatively, you can select Use a custom detection script to use a custom script to detect the presence of the app.

        • Script file – Select a PowerShell script that will detect the presence of the app on the client.

        • Script content – The script content will be displayed and can be copied directly.

        • Run script as 32-bit process on 64-bit clients – Choose to run the script in a 32-bit or 64-bit process on 64-bit clients. 32-bit clients run the script in a 32-bit process.

        • Enforce script signature check and run script silently – Enable this setting to verify that a trusted publisher has signed the script, which will allow the script to run with no warnings or prompts displayed. The script will run unblocked. Disable it to run the script without signature verification.

12. Click Next to go to the Dependencies step.

13. Software dependencies are applications that must be installed before this application can be installed. Click Add dependency, select applications that must be installed before your Win32 app can be installed, and click Select. Choose whether to automatically install the dependent apps by clicking the toggle under the Automatically install column.

14. Click Next to go to the Supersedence step.

15. In the Supersedence step, you can add apps that the current app will supersede. Click Add app, select the apps to apply the supersedence relationship in the Add Apps window, and click Select. In the list of superseded apps, modify the Uninstall previous version option for each selected app to specify whether an uninstall command will be sent by Intune to each selected app.

16. Click Next to go to the Scope tags step.

17. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

18. Click Next to go to the Assignments step.

19. Choose how you want to assign the app to users and devices.

    • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

    • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

    • Uninstall – The app is uninstalled from devices in the selected groups if the application has previously been installed onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

    Assign the app to users and devices by the following actions:

    • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

    • Add all users – Click Add all users to assign this app to all users.

    • Add all devices – Click Add all devices to assign this app to all devices.

20. Click Create to add the app and manage it by the device management service.

#Add a Windows web link app or macOS web clip app

Complete the following steps to add and deploy a Windows web link app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the Windows web link or macOS web clip app type, and click Select.

3. In the App information step, add the app details.

4. Click Next after you have finished populating the fields.

5. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

6. Click Next to go to the Assignments step.

7. Choose how you want to assign the app to users and devices.

   • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

   • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

   • Available with or without enrollment – Select the groups for which you want to make this app available with or without enrollment. Apps with this assignment are displayed in the Company Portal app and website for users to optionally install without requiring the device to be enrolled.

   • Uninstall – The app is uninstalled from devices in the selected groups if the application has previously been installed onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

   Assign the app to users and devices by the following actions:

   • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

   • Add all users – Click Add all users to assign this app to all users.

   • Add all devices – Click Add all devices to assign this app to all devices.

8. Click Create to add the app and manage it by the device management service.

#Add a Line-of-business app

Complete the following steps to add and deploy a Line-of-business app:

1. Click Create in the upper-right corner of the Apps page.

2. Select Line-of-business app, and click Select.

3. In the App information step, click Select app package file.

4. In the App package file window, click Browse to browse to a Windows installation file with the proper extension.

5. When you finish reviewing the app details, click Select.

6. Click Next after you have finished populating the fields.

7. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

8. Click Next to go to the Assignments step.

9. Choose how you want to assign the app to users and devices.

   • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

   • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

   • Uninstall – The app is uninstalled from devices in the selected groups if the application has previously been installed onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

   Assign the app to users and devices by the following actions:

   • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

   • Add all users – Click Add all users to assign this app to all users.

   • Add all devices – Click Add all devices to assign this app to all devices.

10. Click Create to add the app and manage it by the device management service.

#Add a Microsoft Edge, version 77 and later (Windows 10 and later) app

Complete the following steps to add and deploy a Microsoft Edge, version 77 and later (Windows 10 and later) app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the Microsoft Edge, version 77 and later (Windows 10 and later) app type, and click Select.

3. In the App information step, add the app details.

4. Click Next after you have finished populating the fields.

5. Select the channel and language you want to use to deploy the app, and click Next.

6. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

7. Click Next to go to the Assignments step.

8. Choose how you want to assign the app to users and devices.

   • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

   • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

   • Uninstall – The app is uninstalled from devices in the selected groups if the application has previously been installed onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

   Assign the app to users and devices by the following actions:

   • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

   • Add all users – Click Add all users to assign this app to all users.

   • Add all devices – Click Add all devices to assign this app to all devices.

9. Click Create to add the app and manage it by the device management service.

#Add a macOS app (DMG) app

Complete the following steps to add and deploy a macOS app (DMG) app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the macOS app (DMG) app type, and click Select.

3. In the App information step, click Select app package file.

4. In the App package file window, click Browse to browse to a macOS DMG file with the extension .dmg.

5. When you finish reviewing the app details, click Select.

6. Click Next after you have finished populating the fields.

7. In the Requirements step, select the minimum operating system version on which the app can be installed.

8. Click Next to go to the Detection rules step.

9. In the Detection rules step, configure the rules to detect the presence of the app.

   • Ignore app version – For apps that have an autoupdate mechanism, enable this setting. Disable this setting to install the app when it has not been installed on the device, or if the deploying app's version number does not match the version that's already installed on the device.

   • Included apps – Provide the apps that are contained in the uploaded file. Included app bundle IDs and build numbers are used for detecting and monitoring app installation status of the uploaded file.

   • Uninstall – The app is uninstalled from devices in the selected groups if the application has previously been installed onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

10. Click Next to go to the Scope tags step.

11. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

12. Click Next to go to the Assignments step.

13. Choose how you want to assign the app to users and devices.

    • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

    • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

    Assign the app to users and devices by the following actions:

    • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

    • Add all users – Click Add all users to assign this app to all users.

    • Add all devices – Click Add all devices to assign this app to all devices.

14. Click Create to add the app and manage it by the device management service.

#Add a macOS app (PKG) app

Complete the following steps to add and deploy a macOS app (PKG) app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the macOS app (PKG) app type, and click Select.

3. In the App information step, click Select app package file.

4. In the App package file window, click Browse to browse to a macOS PKG file with the extension .pkg.

5. When you finish reviewing the app details, click Select.

6. Click Next after you have finished populating the fields.

7. In the Program step, configure the app installation and removal commands for the app.

   • Pre-install script – Provide a script that runs before the app is installed.

   • Post-install script – Provide a script that runs after the app installs successfully.

8. In the Requirements step, select the minimum operating system version on which the app can be installed.

9. Click Next to go to the Detection rules step.

10. In the Detection rules step, configure the rules to detect the presence of the app.

    • Ignore app version – For apps that have an autoupdate mechanism, enable this setting. Disable this setting to install the app when it has not been installed on the device, or if the deploying app's version number does not match the version that's already installed on the device.

    • Included apps – Provide the apps that are contained in the uploaded file. Included app bundle IDs and build numbers are used for detecting and monitoring app installation status of the uploaded file.

11. Click Next to go to the Scope tags step.

12. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

13. Click Next to go to the Assignments step.

14. Choose how you want to assign the app to users and devices.

    • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

    • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

    Assign the app to users and devices by the following actions:

    • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

    • Add all users – Click Add all users to assign this app to all users.

    • Add all devices – Click Add all devices to assign this app to all devices.

15. Click Create to add the app and manage it by the device management service.

#Add a Microsoft 365 Apps for macOS or Microsoft Defender for Endpoint (macOS) app

Complete the following steps to add and deploy a Microsoft 365 Apps for macOS or Microsoft 365 Apps for macOS app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the Microsoft 365 Apps for macOS or Microsoft Defender for Endpoint (macOS) app type, and click Select.

3. In the App information step, add the app details.

4. Click Next after you have finished populating the fields.

5. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

6. Click Next to go to the Assignments step.

7. Choose how you want to assign the app to users and devices.

   • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

   • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

   Assign the app to users and devices by the following actions:

   • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

   • Add all users – Click Add all users to assign this app to all users.

   • Add all devices – Click Add all devices to assign this app to all devices.

8. Click Create to add the app and manage it by the device management service.

#Add a Microsoft Edge, version 77 and later (macOS) app

Complete the following steps to add and deploy a Microsoft Edg, version 77 and later (macOS) app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the Microsoft Edge, version 77 and later (macOS) app type, and click Select.

3. In the App information step, add the app details.

4. Click Next after you have finished populating the fields.

5. Select the channel you want to use to deploy the app, and click Next.

6. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

7. Click Next to go to the Assignments step.

8. Choose how you want to assign the app to users and devices.

   • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

   • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

   Assign the app to users and devices by the following actions:

   • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

   • Add all users – Click Add all users to assign this app to all users.

   • Add all devices – Click Add all devices to assign this app to all devices.

9. Click Create to add the app and manage it by the device management service.

#Add a Web link app

Complete the following steps to add and deploy a Web link app:

1. Click Create in the upper-right corner of the Apps page.

2. Select the Web link app type, and click Select.

3. In the App information step, add the app details.

4. Click Next after you have finished populating the fields.

5. Select the scope tags from the drop-down list to optionally add scope tags for the app and click Apply.

6. Click Next to go to the Assignments step.

7. Choose how you want to assign the app to users and devices.

   • Required – The app is installed on devices in the selected groups. Some platforms may have additional prompts for the end user to acknowledge before app installation begins.

   • Available for enrolled devices – Assign the app to groups of users who can install the app from the Company Portal app or website.

   • Available with or without enrollment – Select the groups for which you want to make this app available with or without enrollment. Apps with this assignment are displayed in the Company Portal app and website for users to optionally install without requiring the device to be enrolled.

   • Uninstall – The app is uninstalled from devices in the selected groups if the application has previously been installed onto the device via an “Available for enrolled devices” or “Required” assignment using the same deployment.

   Assign the app to users and devices by the following actions:

   • Add group – Click Add group, select the mode Included or Excluded, and select the groups that you want to include in / exclude from the app, and click Add. Then, you can further choose whether to set End user notifications, Installation deadline, and Restart grace period. You can also edit the Filter mode value to apply a filter to include or exclude certain devices from this assignment.

   • Add all users – Click Add all users to assign this app to all users.

   • Add all devices – Click Add all devices to assign this app to all devices.

8. Click Create to add the app and manage it by the device management service.