Event details
89 Comments
For the topic of creating dynamic groups based on specific criteria, along with creating these groups based on if a particular app is installed, it would also be useful to be able to create these groups off of the existence or absence of a specific file and/or registry value. This would be especially useful for homegrown apps that might just put down local files or might simply change certain registry values.
- David_Guyer
Microsoft
Yes, that makes sense... not just app inventory, but device and/or custom inventory. This is good feedback, and if we can solve one, hopefully the others will come along fairly easily :-). Thank you!
-David Guyer - Intune Product Manager
Deployment speed is important for shared devices (required scoping) as part of expectation management. When a lab needs an app update or new app, being able to communicate when a class can actually use the app across all devices becomes an important part of the conversation.
why there is no API for company portal and all the client side portions of Intune
- Per-Larsen
Can you elaborate on your question ?
Company Portal are the end user part of the Intune app model - and we have graph API to our backend.But in some cases it would be great to have a way to trigger app-installations thru other tools. So we would make a available deployment and then run a script to find that app in company portal and trigger installation, when it is needed from another application, process, script or scheduled task.
The only features that I have long felt are missing from Intune, would be seeing:
- a LIST of groups used for assignment
- WHAT has been assigned by each group
- David_Guyer
treestryder This makes sense... otherwise you have to keep in memory what's included in the group... sometimes that's easy, sometimes, not so much! Thank you, I can pass this along to the Grouping team which I've heard understand this problem.
-David Guyer - Intune Product ManagerThank you!
Agreed. With the current functionality, this contextual information must be maintained manually outside of Intune.
The inclusion of a bespoke "Microsoft 365 Apps" app type is useful and simplifies the deployment of the M365 apps to endpoints. However, the process of adding an individual app to a pre-existing install is not smooth; for example, where the company base profile excludes Microsoft Access but some users later require Access, it's tricky to add it when the suite is already installed, largely because most users have at least one of the M365 apps open at all times, which blocks config changes. It's also infeasible to have users self-service via Company Portal since the apps are all delivered as a single bundle.
This adds to the request for adding support for running process handling natively in Intune.
- Pearl-Angeles
Community Manager
We appreciate your feedback! Panelists covered this topic around 17:27 during the live session.
As the applications will function as read-only viewers when unlicensed, we install the entire suite.
Then to ease the burden of managing license groups, I have been pushing our organization to move license requests to Identity Governance Access Packages. Where now we manually work tickets.
- Per-Larsen
The Microsoft 365 Enterprise apps are deployed from Intune with a policy Office CSP | Microsoft Learn
So it is not the same as a Win32 app - but you can packages it can use a script to accomplish what you are asking for.
would be great to combine filters and not need to build new filter, when we need "Filter 1" and/or "Filter 2"
- Per-Larsen
Thanks for the feedback, we do hear that from time to time.
Would it be possible to get an easy process to request new apps (and suggest updates to existing apps) to the team maintaining the list of apps that are located in the Enterprise App catalog?
- Per-Larsen
It can be done from here : aka.ms/IntuneFeedback
- Jason_Sandys
At the most basic the app ID itself. I have this app defined in Intune, give me a group with all machines with it installed, so that I can then (for example) push some policy to it which is required to make that app work
What is your position on being able to use winget commands to keep deployed applications updated? Are Microsoft's winget software repositories safe?
- Jason_Sandys
Calling the WinGet CLI using the system account, which Intune and ConfigMgr use, is unsupported.
As for security of the WinGet Community Repository, there is extensive validation and testing performed. We do not publicly document any of this though and do not general share as there is no explicit guarantee Some supporting info on this is provided at Submit your manifest to the repository | Microsoft Learn.
Is there a plan to add more Filter options to Assignment Filters. Which is kind of an addon to the dynamic group question earlier.
