By: Arnab Biswas | Program Manager - Microsoft Endpoint Manager - Intune
Updated 03/08/22: You can now upload and deploy DMG-type applications to managed macOS devices from Microsoft Endpoint Manager using the required assignment type. DMG is the file extension for Apple disk image files. For more information, seeAdd a macOS DMG app to Microsoft Intune.
You can use Microsoft Endpoint Manager to deploy the most common app types supported by macOS such as .pkg, .dmg or .app. Natively, Mac MDM only supports installing signed .pkg-type applications. Therefore, for apps that are of non-pkg types, it requires admins to run commands on macOS either manually or as a script to create a signed app package (.intunemac file) that can be distributed using Intune. The rest of the document outlines the recommended app preparation steps. These steps have been tested on macOS 10.15.
For apps that require a property list file (plist file), the property list file must be deployed using a macOS device configuration profile in Microsoft Endpoint Manager before the app is deployed. The app deployment will not complete successfully if the property list files are included in the app package.
The converted app must be re-signed for successful MDM-deployment. Unsigned applications are rejected by macOS. This also applies to DMGs containing PKG files.
It is crucial that the PKG files are created using the commands below. PKG files that are packaged using different packaging commands may not deploy successfully.
DMG files containing more than one APP file are not supported.
Let us know by responding to this post if you have any questions or feedback! You can also ask questions by tagging @IntuneSuppTeam out on Twitter where our Support as a Feature team helps answer quick questions.
07/22/20: With an update to the IntuneSuppTeam URL.
03/08/22: You can now upload and deploy DMG-type applications to managed macOS devices from Microsoft Endpoint Manager using the required assignment type. For more information, see Add a macOS DMG app to Microsoft Intune.