Event details
Ready to use Microsoft Intune to deploy, configure, protect, and update apps across your organization? If you have questions, we have answers—Ask Microsoft Anything (AMA) at Tech Community Live! Whatever your combination of public retail apps, private apps, and line-of-business apps, get tips to help you deploy and manage your app estate like a pro—making sure that app data stays within your organization while giving users the access they need.
Speakers: Nicole Zhao, David Guyer, & Iris Yuning Ye
Moderator: Joe Lurie
This event is part of Tech Community Live: Intune edition.
I'm in! How do I sign up?
Select “Add to calendar” to save the date and “Attend” to save your spot, receive event reminders, and participate in the Q&A. If you can’t make the live event, don’t worry. You can post your questions in advance and catch up on the answers and insights later in the week. All sessions for this Intune edition of Tech Community Live will be recorded and available on demand immediately after airing.
This event will feature AI-generated captions during the live broadcast. Human-generated captions will be available by the end of the week.
Where can I post my questions?
Scroll to the bottom of this page and select “Comment.”
68 Comments
- AndrewMcN_SFRSBrass Contributor
I am trying to use Microsoft Connected Caches for Enterprise to expedite delivery of Intune win32 apps. Especially extremely large packages. It doesn't seem to be working for us at the moment. Is there anything more you are doing or could be doing to ensure that (a) we can cache or encourage these things to cache locally and (b) we can monitor and troubleshoot it more easily? The monitoring for MCC seems to report very low figures for Intune.
- AndrewMcN_SFRSBrass Contributor
I think MCC's should be a critical companion service on literally any customer network for efficient app deployment from Intune. The fact that it can run under Windows 11, and doesn't need a Server OS, means it's available to any appropriately licensed customer willing to assign a device to the purpose. I don't think it should be treated or thought of as not the Intune team's concern. Not every customer is going to have super-fast Internet service. Even if you have fast Internet, an MCC is still more efficient. Why waste bandwidth. It can't be good for energy consumption.
The size of these packages, I appreciate is rare. We have a package that is 28.2GB and another two that are around 18GB. It's for a new self-deploying Windows client going into emergency services vehicles (it's a mapping app and documentation library) and we have around 700 targets for this. Intune delivers them just fine, but we have positioned an MCC on the same switch and VLAN, in our build room and hoped it would help. We've run the deployment many times now since early November last year but it doesn't seem to be retrieved from the MCC. It can literally take an entire day for the Autopilot build to complete because of this. Our current Internet feed isn't up to the job. We need to be building 100/week and had hoped to avoid as much human intervention as possible.
I have posted about this within the Intune Infrastructure discussions in the Management CCP Teams chat, where Jason Sandys replied and said he'd discussed with the MCC PM. He mentioned the requirement for the Intune Win32 content needing to be requested 3+ times before it will be cached. We must be past that by now.
Metrics don't seem to reflect the cache is supporting this or much else at all. It's almost as though it's not doing any Win32 packages. This was 7 days activity:
HTTPS is enabled on the cache.
On all caches, seeing more realistic figures for Windows Updates/Store, Office, Edge and Teams. Intune figures just seem low. It's similar on our main MCC's feeding our normal corporate clients.
I wondered if content needed to be flagged [by Intune] in any particular way to end up on these caches? Could it be the Intune end that's not doing enough? Are we missing a trick? Could the recent shift to AFD be to blame (at either end)? How can I diagnose what's going wrong further?
Support Request has been logged with the same email address I am posting with here.
I was starting to fear that I'm experiencing another nightmare caused by our decrypting transparent proxy. However, I can see some Intune and Teams content coming through. So, I'm not convinced it's being interfered with at our end. 30 days for the MCC's I've deployed so far:
The Intune content is nowhere near showing the 20 devices built with the massive packages.
Would be useful for anyone else who's not experienced any issues with delivery of Win32 apps that are excessively large [Ideally, 17GB and above] to let me know it does work. This will allow me to prioritise investigating proxy interference here.
- Pearl-Angeles
Community Manager
AndrewMcN_SFRS the panelists raised your question at around 24:36 in the live AMA. They requested you please share more details about this issue so they can help. Thanks!
- Christopher_Lin
Microsoft
Hi AndrewMcN_SFRS, thank you for the detailed write-up on your issue. I'm a PM on the MCC team and would like to learn more about your environment and try to get you unblocked.
Can you please re-post your issue to the MCC Tech Community forum (Microsoft Connected Cache for Enterprise and Education | Microsoft Community Hub) so that we can make this visible to other MCC customers as well?
We can continue the discussion there.
- TastyPastryCopper Contributor
Are there any plans to have Application Groups (like in SCCM ) in Intune?
- Pearl-Angeles
Community Manager
This question was addressed at 24:02 during the live AMA!
- TastyPastryCopper Contributor
Hi,
Loving these AMA's! Question, what would be easiest way to migrate existing applications from SCCM to Intune?- Pearl-Angeles
Community Manager
Thanks for sharing and for your participation! The panelists covered this question at 21:42 during the live AMA.
- AndrewMcN_SFRSBrass Contributor
Do you have E3/E5 to qualify for the Intune Suite rollout due in Q3? I'm hoping the majority of apps, we've still got in SCCM, will be in Microsoft's Enterprise App Catalogue and we can just switch to those. It should be low effort, and they should be maintained for us moving forward. "No more packaging" is the dream.
I don't think there's a maintained public catalogue listing. I found someone sharing an outdated listing but that was it.
Otherwise, you might consider a third-party service like Patch My PC.
Winget is free.
- AdamB_SSEngineerCopper Contributor
Iris - Can you share the community group names on here?
- benjamin_flamm
Microsoft
aka.ms/macadmins is the LinkedIn community
- AdamB_SSEngineerCopper Contributor
Hello, Deploying apps is fantastic with Intune. However, there is two gripes I have that I would love to see in the future.
allowing phased installs instead of just assign. this would help with update's and sequencing them in rings similar to autopatch.
better reporting for apps when they fail rather than depending on scripting to create a log file and dig for that file.
Is there any plan to improve this experience?- AdamB_SSEngineerCopper Contributor
Definitely would be awesome to see what intune sees when its says "failed" even a bit of info helps!
thank you for answering David
- Joe_Lurie
Microsoft
AdamB_SSEngineer Thanks for the questions. We answered these in the video above.
- Deployment rings: David mentions deployment rings at 8:52 in the video. Nicole and I clarify the ring comment at 9:58 above.
- Reporting: David talks throughout the video about the work he's doing in reporting. Feel free to DM David_Guyer with any comments or additional questions that he didn't answer.
- ThatGuySilverOccasional Reader
What are the best practices for deploying applications that install in the User Profile rather than the C Drive? Especially including App Control for Business as the system you are using to prevent installation paths such as the User Profile.
- Pearl-Angeles
Community Manager
Thanks for your question! The panelists covered this topic at around 28:13 during the live AMA.
- Sunil825312Copper Contributor
I have a scenario where 500 tablets are deployed using Intune with a set of application. I need to add a new app only to 15 tablets (keeping existing apps) out of these 500 tablets. How can I achieve this without creating a new enrolment and configuration profile and without touching the exiting setup.
- Abigail_Stein
Microsoft
Hi Sunil825312-- To assign an app to just some devices, create a group for those devices and assign the application to that group. Managed Home Screen will only allow access the application if it is assigned to the devices, so the application will only appear for the devices within the new group.
- c_cass1Copper Contributor
This question is more on Intune MAM side, will there ever be a day when we can have multiple work accounts on a BYOD device under MAM controls.
- CloudEnquirerOccasional Reader
Can you please explain and point to some resources which guide in detail on how to deploy apps using the new PowerShell Script feature?
- Pearl-Angeles
Community Manager
Thanks for your participation! Your question was addressed at around 37:47 during the live AMA.
- Pearl-Angeles
Community Manager
Thanks for joining today's AMA, part of Tech Community Live: Intune edition. This session is designed to be interactive, so post your questions in the comments below, and our experts will be answering live and in chat.