Event details

Join the Intune engineering team for an interactive session on streamlining app management with Microsoft Intune. We’ll talk about current investments and what we're exploring next—then open the floor to your feedback. Tell us what’s working, what’s missing, and what would make app deployment and management even easier for your organization. Your real‑world scenarios and needs directly shape how we prioritize and design upcoming capabilities. Come help us build the next chapter of Enterprise App Management.

Speakers: Nicole Zhao, David Guyer, & Heena Macwan
Moderator: Joe Lurie 

 

This session is part of the Microsoft Technical Takeoff: Windows + Intune. Add it to your calendar, click Attend for event reminders, and post your questions and comments below! This session will also be recorded and available on demand shortly after conclusion of the live event.

Heather_Poulsen
Updated Mar 05, 2026

89 Comments

  • shin0933's avatar
    shin0933
    Brass Contributor

    Is there a plan to provide more visibility to the supersedence portion of app deployment? For example, I  have an app that I deployed an update to that supersedes an existing deployment. If I deploy an app that supersedes both the update an the original deployment, then weeks later go back and delete the original deployment, I have to find the app that is preventing the deletion because of the supersedence relationship. 

    In SCCM, I can at least see the offending app. In Intune, I'm not able to other than that there's a supersedence rule applied. 

    • Pearl-Angeles's avatar
      Pearl-Angeles
      Icon for Community Manager rankCommunity Manager

      Thanks for your feedback! Panelists covered this topic at 3:06 during the live session. 

    • BryanDam's avatar
      BryanDam
      Iron Contributor

      I'll add the same for dependencies: you can see down the chain but not up. As I'm modifying an app, it'd be good to know which other apps depend on it.

  • Likutz's avatar
    Likutz
    Copper Contributor

    We’re missing a way for Intune to detect unmanaged installations of “Available” assigned applications. Currently, updating or taking over management is difficult if the app wasn’t installed via Intune. This calls for workarounds, multiple versions of the same application and tweaked “Required” assignments.

    A simple solution would be a “checkmark” similar to the “AutoUpdate” function in Supersedence. If checked, Intune would check if detection is met and mark the application as installed. This would make applications installed outside Intune manageable within Intune, allowing admins to update them via superseded versions.

    The checkmark solution, compared to Intune automatically checking and detecting all “Available” assigned apps, minimises resource and time consumption on Intune Syncs.

    I look forward to an insightful and constructive session.

    • David_Guyer's avatar
      David_Guyer
      Icon for Microsoft rankMicrosoft

      Likutz​ ,   thank you for this feedback... it is something we've heard and are looking at.  No promises yet, but I'd like to help solve this sometime.

      -David Guyer - Intune Product Manager

  • Add the running process check like in ConfigMgr, before upgrading or superseding an application. If the native app is running, alert user first.

    • Pearl-Angeles's avatar
      Pearl-Angeles
      Icon for Community Manager rankCommunity Manager

      Thanks for your feedback! This topic was discussed at 5:22 during the live session. 

  • Chris650's avatar
    Chris650
    Copper Contributor

    Will apps.microsoft.com installers be brought into the fold to follow settings like the built-in app store? Having students bypass the app store restriction by using the website is a large security hole and using workarounds to patch it is clunky and annoying. I have not investigated the new command line store but I fear it is another hole in app security and management.

      • Chris650's avatar
        Chris650
        Copper Contributor

        It has not. The installers downloaded from apps.microsoft.com bypass the local settings for the app store. Coupled with "free" apps not requiring a sign in to download the apps leads to users trying to install apps and a multitude of workarounds to block them without breaking all app store apps like the ones that are properly pushed through intune.

  • shin0933's avatar
    shin0933
    Brass Contributor

    Will there ever be a way to create a dynamic group of devices that have a particular program installed in Intune? I have this set up in Config Manager and this helps with program deployment. 

  • shin0933's avatar
    shin0933
    Brass Contributor

    I have applications that autoupdate. This makes managing detection rules challenging. It's tempting to use the "IF Program Files <program> folder exists" rule, but that can cause headaches when the time comes to deploy a new updated app if it uses the same folder. In some cases, the ProductID code is the same. I would absolutely love an easier way to manage the detection rules for .MSIs and .EXEs that autoupdate. Is that something that can be considered? 

    • David_Guyer's avatar
      David_Guyer
      Icon for Microsoft rankMicrosoft

      shin0933​ ,

      Can you tell me a bit more about why just dropping the version off isn't sufficient? Just looking for the file or regkey but ignoring version?

      -David Guyer - Intune Product Manager

      • shin0933's avatar
        shin0933
        Brass Contributor

        We have a few win32 apps that self update. Sometimes we need to deploy a new update over the apps that self update. This is where the challenge is because if I use a version regkey value, then that value could get changed after a self-update. Same thing for product ID. If an installation is required and the Intune deployment detection method is set to the version regkey value or ProductID, then the installation will try to go through again. 

        If the detection method is set to the existing of a file/folder, then I have to find something that is set to that version of the program. Otherwise Intune will say the application is already installed, but it didn't install the new update. 

        My work around is to use a custom powershell script that searches for select criteria, uninstalls everything, then, re-installs the new update, should the self-updating application get stuck or hung. 

        Does this make sense? I'm happy to provide further details if needed. I've also attempted to work with the program owner, but my efforts appear to not go anywhere. 

         

  • CraigDK's avatar
    CraigDK
    Iron Contributor

    Given Microsofts push towards MSIX (which was diluted by opening up the MS Store to Win32 apps), it would be great if under the Enterprise App Management feature MS were able to repackage and offer up vendor apps in MSIX format where the vendor doesn't provide them as such.

      • CraigDK's avatar
        CraigDK
        Iron Contributor

        We have a requirement to use some of those apps on non persistent VDI's (e.g. AVD) - the format of most of the apps coming from Enterprise App Management today is as per the vendors native install. By having MS prepare them in MSIX we can then use AppAttach for dynamic delivery to AVD.