Event details
Join the Intune engineering team for an interactive session on streamlining app management with Microsoft Intune. We’ll talk about current investments and what we're exploring next—then open the floor to your feedback. Tell us what’s working, what’s missing, and what would make app deployment and management even easier for your organization. Your real‑world scenarios and needs directly shape how we prioritize and design upcoming capabilities. Come help us build the next chapter of Enterprise App Management.
Speakers: Nicole Zhao, David Guyer, & Heena Macwan
Moderator: Joe Lurie
This session is part of the Microsoft Technical Takeoff: Windows + Intune. Add it to your calendar, click Attend for event reminders, and post your questions and comments below! This session will also be recorded and available on demand shortly after conclusion of the live event.
89 Comments
- shin0933Brass Contributor
Is there a plan to provide more visibility to the supersedence portion of app deployment? For example, I have an app that I deployed an update to that supersedes an existing deployment. If I deploy an app that supersedes both the update an the original deployment, then weeks later go back and delete the original deployment, I have to find the app that is preventing the deletion because of the supersedence relationship.
In SCCM, I can at least see the offending app. In Intune, I'm not able to other than that there's a supersedence rule applied.- Pearl-Angeles
Community Manager
Thanks for your feedback! Panelists covered this topic at 3:06 during the live session.
- BryanDamIron Contributor
I'll add the same for dependencies: you can see down the chain but not up. As I'm modifying an app, it'd be good to know which other apps depend on it.
- Pearl-Angeles
Community Manager
We appreciate your feedback! This follow up topic was covered at 5:07.
- LikutzCopper Contributor
We’re missing a way for Intune to detect unmanaged installations of “Available” assigned applications. Currently, updating or taking over management is difficult if the app wasn’t installed via Intune. This calls for workarounds, multiple versions of the same application and tweaked “Required” assignments.
A simple solution would be a “checkmark” similar to the “AutoUpdate” function in Supersedence. If checked, Intune would check if detection is met and mark the application as installed. This would make applications installed outside Intune manageable within Intune, allowing admins to update them via superseded versions.
The checkmark solution, compared to Intune automatically checking and detecting all “Available” assigned apps, minimises resource and time consumption on Intune Syncs.
I look forward to an insightful and constructive session.
- David_Guyer
Microsoft
Likutz , thank you for this feedback... it is something we've heard and are looking at. No promises yet, but I'd like to help solve this sometime.
-David Guyer - Intune Product Manager
- Matt Balzan
Microsoft
Add the running process check like in ConfigMgr, before upgrading or superseding an application. If the native app is running, alert user first.
- Pearl-Angeles
Community Manager
Thanks for your feedback! This topic was discussed at 5:22 during the live session.
- Chris650Copper Contributor
Will apps.microsoft.com installers be brought into the fold to follow settings like the built-in app store? Having students bypass the app store restriction by using the website is a large security hole and using workarounds to patch it is clunky and annoying. I have not investigated the new command line store but I fear it is another hole in app security and management.
- Jason_Sandys
Microsoft
Hi Chris650, Is this still a challenge. I thought that this was addressed/closed?
- Chris650Copper Contributor
It has not. The installers downloaded from apps.microsoft.com bypass the local settings for the app store. Coupled with "free" apps not requiring a sign in to download the apps leads to users trying to install apps and a multitude of workarounds to block them without breaking all app store apps like the ones that are properly pushed through intune.
- shin0933Brass Contributor
Will there ever be a way to create a dynamic group of devices that have a particular program installed in Intune? I have this set up in Config Manager and this helps with program deployment.
- Pearl-Angeles
Community Manager
Great feedback! Panelists covered this topic at 8:18 during the live session.
- shin0933Brass Contributor
I have applications that autoupdate. This makes managing detection rules challenging. It's tempting to use the "IF Program Files <program> folder exists" rule, but that can cause headaches when the time comes to deploy a new updated app if it uses the same folder. In some cases, the ProductID code is the same. I would absolutely love an easier way to manage the detection rules for .MSIs and .EXEs that autoupdate. Is that something that can be considered?
- David_Guyer
Microsoft
shin0933 ,
Can you tell me a bit more about why just dropping the version off isn't sufficient? Just looking for the file or regkey but ignoring version?
-David Guyer - Intune Product Manager- shin0933Brass Contributor
We have a few win32 apps that self update. Sometimes we need to deploy a new update over the apps that self update. This is where the challenge is because if I use a version regkey value, then that value could get changed after a self-update. Same thing for product ID. If an installation is required and the Intune deployment detection method is set to the version regkey value or ProductID, then the installation will try to go through again.
If the detection method is set to the existing of a file/folder, then I have to find something that is set to that version of the program. Otherwise Intune will say the application is already installed, but it didn't install the new update.My work around is to use a custom powershell script that searches for select criteria, uninstalls everything, then, re-installs the new update, should the self-updating application get stuck or hung.
Does this make sense? I'm happy to provide further details if needed. I've also attempted to work with the program owner, but my efforts appear to not go anywhere.
- CraigDKIron Contributor
Given Microsofts push towards MSIX (which was diluted by opening up the MS Store to Win32 apps), it would be great if under the Enterprise App Management feature MS were able to repackage and offer up vendor apps in MSIX format where the vendor doesn't provide them as such.
- Jason_Sandys
Microsoft
Hi CraigDK, What is the goal for doing this? What challenge would be addressed or solved by doing this?
- CraigDKIron Contributor
We have a requirement to use some of those apps on non persistent VDI's (e.g. AVD) - the format of most of the apps coming from Enterprise App Management today is as per the vendors native install. By having MS prepare them in MSIX we can then use AppAttach for dynamic delivery to AVD.