Confusion Regarding Filter Precedence
App Deployment/Packaging Here's the scenario I'm facing (VPP app): Group A (Required Assignment): Users: Identical to Group B. Filter: Include only corporate iPhones. Purpose: Auto-install the app on corporate-owned iPhones. Group B (Available Assignment): Users: Identical to Group A. Filter: None. Purpose: Make the app available to all devices (corporate and BYOD) in the Company Portal. Issue: BYOD devices are receiving the required install despite the filter. Filter message: "The app was offered during the last check-in. We couldn't evaluate the device for matching filters because a conflicting assignment didn't require filters." Filter: (device.model -contains "iPhone") and (device.deviceOwnership -eq "Corporate") Evaluation result: Not evaluated due to a conflicting assignment without filters. Business Request: The app should be available to the same list of users. It should be required (auto-installed) only on corporate devices. Overlapping groups are used to simplify automation and avoid complicating the process for the Service Desk, which would need to check if devices are BYOD or corporate-owned. I've been looking at: https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-reports-troubleshoot#filters-and-assignment-conflict-resolution https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-reports-troubleshoot#filters-and-assignment-conflict-resolution https://learn.microsoft.com/en-us/mem/intune/apps/apps-deploy#how-conflicts-between-app-intents-are-resolved And am admittedly a little smooth-brained. Can anyone explain what's happening here and how to resolve? Is the "no filter" available group taking precedence over the "include" filter and somehow pushing to all devices? How can I rectify this? Can I just add a dynamic group to exclude all BYOD devices in the required assignment and leave the rest the same or use an exclude filter for BYOD device in the required assignment? Any help is appreciated.
Deploy File to Intune Enrolled Devices as Win-32 App
I had a request to Deploy a pdf file to user's desktop and could not find clear documentation, hence here is how I successfully deployed it and decided to share is with this amazing community. Deploy File to Intune Enrolled Devices Deploy a file to Intune enrolled device's to "C:\Users\Public\Desktop" through Intune Step 1: Prepare the files: The File Install-file.ps1 Remove-file.ps1 Detect-file.ps1 Step 2" Create an Install, Remove & Detect script & save each scripts A. Install: #Installation Script: Install-file.ps1 $FileName = "FileToDesktop.pdf" $ScriptPath = [System.IO.Path]::GetDirectoryName($MyInvocation.MyCommand.Definition) Copy-Item -Path "$ScriptPath\$FileName" -Destination "$Env:Public\Desktop" B. Remove: # Remove Installation: Remove-file.ps1 $FileName = "FileToDesktop.pdf" Remove-Item -Path "$Env:Public\Desktop\$FileName" C. Detect: # save this in a separate folder #Detect File : Detect-file.ps1 $FileName = "FileToDesktop.pdf" if (Test-Path -Path "$Env:Public\Desktop\$FileName"){ Write-Output "0" } Step 3: collect Install-file .ps1, Remove-file .ps1 and the required files in one folder as shown above and create an Intune installation Package. PS C:\Intune\WindowsIntunePrepTool> .\IntuneWinAppUtil.exe Please specify the source folder: C:\DeployFile\FileToDeploy Please specify the setup file: FileToDesktop.pdf Please specify the output folder: C:\DeployFile Do you want to specify catalog folder (Y/N)?N Step 4. Deploy Intune installation file with the following commands Upload the IntunePackage as " App : Windows app (Win32) Install Command: %windir%\system32\windowspowershell\v1.0\powershell.exe -executionpolicy bypass -file "Install-file.ps1" Uninstall Command: %windir%\system32\windowspowershell\v1.0\powershell.exe -executionpolicy bypass -file "Remove-file.ps1" Operating system architecture = select both 32/64-bit Detection rule: use custom detection script and upload the Detect script created above. Following the above steps, it is straight forward and easy to deploy a file to Intune Enrolled devices when required.Android Enterprise (fully managed) App installation stuck at pending
Hi everyone I have an Android Device enrolled with the Android (fully managed) profile. There are several Apps that get deployed to this device. However, the installation stuck at "pending" as seen in my screenshot. After I click on the pending App, the Play Store opens. Then I click on cancel and then install. After that the App gets installed. My Managed Google Play Store Apps in Intune are all Required and targeted to "All users". The Apps get automatically installed on my personally-owned work profile Phones without any issues. When I look under Device install status from the deploying App, I see the device with Status "Failed" and Status Details "The application failed to install, possibly because of insufficient storage or an unreliable network connection. The installation will be retried automatically. (0xC7D24FBA)" Does anyone face the same issue or know how to solve it? Thanks for your help ❤️Accessibility URL need
Within Intune / Endpoint Manager when registering an app you have the following options... Information URL Privacy URL However we are in need of an accessiblity statement url record against the app/website Some background reading in UK law for public sector + you should be doing it anyway as good practice https://www.local.gov.uk/our-support/accessibility
Win32 apps for non-primary users
We have more and more requests coming in for multiple users on one shared device. We're currently doing tests with Win32 apps on 1903 devices with multiple users (ESP enabled). So for now it seems that all Win32 apps get stuck on the 2nd user, while on the 1st/primary user everything works fine. Store apps seem not to be affected. We're still investigating but could not find any helpful information so far. Anyone else experience this? Thank you! Tom
