Event details
Ready to use Microsoft Intune to deploy, configure, protect, and update apps across your organization? If you have questions, we have answers—Ask Microsoft Anything (AMA) at Tech Community Live! Whatever your combination of public retail apps, private apps, and line-of-business apps, get tips to help you deploy and manage your app estate like a pro—making sure that app data stays within your organization while giving users the access they need.
Speakers: Nicole Zhao, David Guyer, & Iris Yuning Ye
Moderator: Joe Lurie
This event is part of Tech Community Live: Intune edition.
I'm in! How do I sign up?
Select “Add to calendar” to save the date and “Attend” to save your spot, receive event reminders, and participate in the Q&A. If you can’t make the live event, don’t worry. You can post your questions in advance and catch up on the answers and insights later in the week. All sessions for this Intune edition of Tech Community Live will be recorded and available on demand immediately after airing.
This event will feature AI-generated captions during the live broadcast. Human-generated captions will be available by the end of the week.
Where can I post my questions?
Scroll to the bottom of this page and select “Comment.”
68 Comments
Joe_Lurie Thanks for mentioning Robopack. Yes, Microsoft did partner with Robopack to help customers migrate from ConfigMgr or other legacy 3rd party solutions to Intune quickly and easily. Please update your team and especially the panel speakers who work in the application space as they seem to be unaware of this. Using native Intune or Co-Management as suggested by a panelist is not the solution to migrate applications to Intune and to get customers on the Cloud Native journey sooner. Please feel free to reach out (you know how to find me) if there are any questions or if I could further assist. Here's a link to the partnership announcement:
Face the future today by moving your application to cloud native - Microsoft Intune Blog
-Ex Microsoft Colleague
- BS19-AM-HHCopper Contributor
We sometimes have the need to deploy macOS apps with Intune to specific devices which do fall into the category of our "normal" dynamic device groupings. If we could create groups using specific serial numbers of our macOS devices, this would solve many of these types of problems.
Question is: is there a way to define static and/or dynamic groups in Intune for macOS using device serial numbers? And if not, is this in the planning?
Many thanks from Hamburg, Germany.- Joe_Lurie
Microsoft
BS19-AM-HH Sounds like this is a general Intune question, not specific to macOS, correct? Device Serial Number isn't one of the attributes that can be used for creating a group in Intune. One thing you could do as a workaround is to use Device Category or Group Tags. As you enroll a device, assign a Group Tag based on the Serial Number, then create the group based on the Tag.
Alternatively, you might look at using one of the unused extension attributes in Entra.
Can you please go to our Intune Feedback site to enter that feedback? https://aka.ms/IntuneFeedback. I did find this Feedback that's already been entered, so you can give it an upvote 👍
- BS19-AM-HHCopper Contributor
Joe, thanks for the reply!
OK, I'll give your suggestions a try.
- AndrewMcN_SFRSBrass Contributor
I just gave up an hour of my day to reply to Pearl... can I just sanity check... this site accepted my reply but then just deleted it because you're blocking replies to Pearl?
- Pearl-Angeles
Community Manager
Hi AndrewMcN_SFRS - thank you for taking the time to share your response-- we really appreciate your engagement in the discussion. I’m not entirely sure what happened on your end, but I can confirm that your reply did come through on our side. I’ll make sure it’s shared with the panelists. Please don’t hesitate to let me know if you continue to experience any issues with the platform.
- Pearl-Angeles
Community Manager
Thanks for your participation in today's AMA! Q&A is open through this Friday at 12p PT, so don't hesitate to post your questions here.
Below are the questions the panelists answered live, along with associated timestamps:Question – WinGet, Store, EAM.... so many catalogs of Windows apps. Why use one over the other? – answered at 2:49.
Question – This question is more on Intune MAM side, will there ever be a day when we can have multiple work accounts on a BYOD device under MAM controls? Is this being investigated and/or worked on? – answered at 5:14.
Question – What are best practices in relation to authorizing third-party applications? – answered at 7:38.
Question – Hi from Bavaria, what is the best practice for app deployment with Intune? – answered at 13:17.
Question – Can we have better reporting for apps when they fail rather than depending on scripting to create a log file and dig for that file? -- Maybe talk about what's available today and where we are investing. – answered at 18:29.
Question – What would be easiest way to migrate existing applications from SCCM to Intune? – answered at 21:42.
Question – Are there any plans to have Application Groups (like in ConfigMgr) in Intune? – answered at 24:02.
Question – I am trying to use Microsoft Connected Caches for Enterprise to expedite delivery of Intune win32 apps. Especially extremely large packages. It doesn't seem to be working for us at the moment. Is there anything more you are doing or could be doing to ensure that (a) we can cache or encourage these things to cache locally and (b) we can monitor and troubleshoot it more easily? The monitoring for MCC seems to report very low figures for Intune. – answered at 24:36.
Question – Is there any plan for the ability to auto update apps with EAM without the need to monitor for apps with updates and manually selecting update? – answered at 26:48.
Question – What are best practices for deploying applications that install in the User Profile rather than the C Drive? Especially including App Control for Business as the system you are using to prevent installation paths such as the User Profile. – answered at 28:13.
Question – What are the current best practices for handling parallel versions of the same Win32 app in Intune, especially in scenarios where multiple versions can conflict with detection rules or supersedence during Autopilot provisioning? – answered at 34:04.
Question – Can you please explain how to deploy apps using the new PowerShell script feature? – answered at 37:47.
Question – What is the best way to UPDATE Win32 Apps, when an app version is packaged as win32 but for install method, a power shell script been used? (The PS script is a great move, btw.) – answered at 40:00.
Question – We deploy Office Apps via Intune (fully Intune environment) When I go to Monitor -Discovered Apps there are many different versions, eg Microsoft.OutlookForWindows has 30+ Different version numbers. Currently deploying on Current Channel, is there any way to bring them all up to the latest version without having to manually select a specific version number in a faster way? – answered at 41:15.- TCL link here
Question – QUESTION from Abhishek on Tech Community -- Are we building anything like software metering. Usage reports are really important for licensed apps. If there is a custom solution, could you please clarify it? – answered at 45:25.
- Please share your feedback at the Intune feedback portal!
Question – We have macOS devices enrolled without user affinity. Is there a way to deploy apps as available in Company Portal rather than them being required? if not is this in development at all? Loving the sessions, some great questions/answers that have been really helpful. Thanks Folks. – answered at 47:52.
Here are some MacOs resources:
- Anbarasan_TCopper Contributor
Is there any future plan, to allow customizing the Install/Uninstall button in the Company Portal app to display any custom label?
- Max_Stein
Microsoft
Hi Anbarasan_T, thanks for the question! Nothing on the immediate roadmap, but we'd love to get your feedback! Feel free to suggest this on our Intune Feedback portal so other customers can comment and vote on the same publicly: aka.ms/IntuneFeedback.
- Anbarasan_TCopper Contributor
With Microsoft introducing Enterprise App Management (EAM) as part of the Microsoft 365 suite, I wanted to understand the long-term direction for WinGet.
Since WinGet is currently an open-source community-driven solution for app discovery and deployment, while EAM provides a curated and managed app catalog within Intune:
Does Microsoft see EAM as a replacement for WinGet in enterprise environments, or as a complementary solution?
Are there any plans to change WinGet’s open-source nature or limit its enterprise usage in favor of EAM?
- Jason_Sandys
Microsoft
First note that while WinGet is open source, it is not actually community driven. The WinGet Community Repository is community driven, but that's different from WinGet itself.
No, EAM is not a replacement for either WinGet or the WinGet Community Repository, however, today there is no way to directly leverage the WinGet Community Repository in Intune. There have been discussions on changing this but there are no plans currently.
There are no plans to change WinGet or the WinGet Community Repository. Are there specific apps within the Community Repository that you'd like to see made available in EAM? If so, please submit them through the Feedback Portal as documented at https://learn.microsoft.com/en-us/intune/intune-service/apps/apps-enterprise-app-management#how-can-i-request-to-add-an-application-to-the-enterprise-app-catalog.
- CloudEnquirerOccasional Reader
In ESP, is there a way to find out which application is being installed? Usually there is a list of apps being deployed
- AvinashBanyalOccasional Reader
The big pain point is bulk managing/correcting primary users. Mg Graph have limited cmdlets which do not address this. There should be some attribute like “most logged-on user on a device” and some global setting to set it as primary user. Any plans to address that?
- Joe_Lurie
Microsoft
AvinashBanyal Thanks for the question and the feedback. Please go to our Intune Feedback page and 👍some of the existing comments. There are a few comments on Primary User. If one doesn't exactly match what you are looking for, feel free to add new Feedback.
https://feedbackportal.microsoft.com/feedback/search/ef1d6d38-fd1b-ec11-b6e7-0022481f8472?q=primary+user
- Pearl-Angeles
Community Manager
Thank you everyone for your participation in today’s AMA! The session has now concluded, but you can continue posting your questions here until Friday at 12p PT. Catch the next AMA at 10:00 AM PT: AMA: Best practices for applying Zero Trust using Intune.
- Sunil825312Copper Contributor
My question is not answered yet and I heard the host saying we are out of questions 😩
- Pearl-Angeles
Community Manager
Sunil825312 while we weren't able to get to everyone's questions during today's live AMA due to time constraints, our team of experts will be reviewing open questions on this page and replying in the chat.