Forum Discussion
[iOS] can you use a mix of VPP-enabled apps and regular apps?
I'll be straightforward, I find the InTune documentation particularly terrible. It did not help that we had to deploy hastily, but still. Bad..
We brought a number of iOS devices into InTune using an ABM token and enrollment profiles. Unfortunately, after the first enrollment, no other devices would actually get the InTune application. So we changed things up to use VPP-enabled apps, since they are managed devices. (the domain capture occurred essentially after the first enrollment (not by choice), and I'm assuming Managed Device's dubious ability to download their own apps contributed to this)...
Anyway, it seems like a number of functionalities don't work with VPP apps. Policy sets, App provisioning/protection (as far as I can tell)... So I'm wondering if it's possible to use regular, App-store apps (without adding them in ABM)? I've read conflicting things on whether being apple-managed prevents App Store downloads, so hoping someone has experience.
If this is an easy answer, I'll ask another: Does anyone understand the "OutOfDate" error that sometimes pops for iOS update policies? SOMETIMES, it comes with an error code that I've found referenced in the https://learn.microsoft.com/en-us/graph/api/resources/intune-deviceconfig-iosupdatesinstallstatus?view=graph-rest-1.0 - either "Installing" or "Downloading" - but they've been stuck for days, so it's not really clear what's going on. "OutOfDate" implies to me that when the device checked in last, the update didn't apply because of my Update timerange.... But I have devices that were both in and out of the timerange.
1 Reply
Answering with what I've found for future use. You are using VPP apps because the devices are managed - they are owned within ABM, and have managed apple ids set. Managed apple IDs cannot purchase apps, and have had issues even installing company portal built as a non-vpp app. The VPP takes a license as an admin, and assigns it to the managed apple id - which allows it to be downloaded.
Adding non-VPP apps COULD work, if the device were to use the secondary personal apple id, but until tested that's not guaranteed. But where they are managed apple id's (even with secondary personal apple ids), use VPP apps.
