Automatically convert an unmanaged iOS app to a managed one
We need a solution to the following problem. All of our iOS devices are supervised and we have no BYOD. We offer various iOS apps to our users in the company portal. There are some apps that are set to "Required" and there are many apps that are set to "Available". The problem we have is this: When a user installs an app that we offer as "Available" in the company portal from the Apple App Store, it remains unmanaged. We need a way to convert the app automatically into a managed app, without user interaction. If an app is set up as required, it will be converted automatically. However, we cannot set all apps as required to perform the conversion. Other MDM providers, such as Ivanti/MobileIron, offer an option in the app settings so that you can convert any app that you offer in the internal app store, regardless of whether the app is required or not. Is there a solution to this problem in Intune? Example for what I wish: In the settings from the App Settings there should be a option like "Convert App in managed App".Podcast Microsoft Ignite E05: Agent Builder
Excited to have Pascal Brunner join me in my Ignite series, where we dive into one of the hottest announcements AgentBuilder In this episode, we break down: -What AgentBuilder is all about. -How it empowers organizations with AI-driven automation. -Key takeaways YOUTUBE https://youtube.com/@shadykhorshed?si=c8CLxoCjMfUMfA19New Blog Post: Android: Browser Access to be Enabled by Default for All Android Users
🔐#Android in #msintune: Upcoming Security Update for Microsoft Entra ID on Android! Starting July 2025, Microsoft Entra ID device registration will be hardware-bound, enhancing security and automatically enabling browser access. 🚀 Key Changes: ✅ Device identities will be tied to hardware for stronger security. ✅ Enable Browser Access (EBA) will be retired. ✅ Browser access will be enabled by default during registration. 📌 No action needed—this change will be applied automatically! Stay informed and prepare for a more secure device registration process. #MicrosoftIntune #MicrosoftEntraID #Android #mvpbuzz https://www.linkedin.com/pulse/microsoft-entra-browser-access-enabled-default-all-android-khorshed-5d8ee?utm_source=share&utm_medium=member_ios&utm_campaign=share_via
Microsoft Intune App Deployment
I have this autoinstall script for MATLAB 2024, the installer_input.text is configured with the right information inside it and every test I've done on my machine (locally) succeeded, however when I'm trying to deploy the software to a device and it creates a path in C:\Program Files\MATLAB however even though its creating this path at the installing stage it still not fully deploy the software like it should.. "%~dp0setup.exe" -inputFile "%~dp0installer_input.txt" TIMEOUT /T 120 /NOBREAK Exit 0 The install command in intune I set to cmd.exe /c autoinstall.bat what can i do to fix it? maybe the intune install command isn't good? or its within my autoinstall scriptDisable automatic app updates for specific apps in Intune
Hi, In our organization, I have enabled all three options below to install and manage traditional Android applications through Intune, However, we have encountered a situation where certain specific Android applications, such as the Google Play Private App, only work with lower versions of the OS. The higher version is not compatible, and Google Play Store is reporting it as an unsafe app and blocking it. Is there any option available in Intune that allows us to block automatic app updates for specific applications?
We’re running into an Intune issue where a Win32 app with a dependency sits at "Download Pending"
Setup: Main App: Installs in User Context Dependency: Installs in System Context Dependency Detection: Hosts file modification detection script Direct file detection does NOT work either When the hosts file modification is present (detection is met), detection works, and everything installs fine manually The Problem: If detection passes (exit 0) → Everything installs fine. If detection fails (exit 1) → Intune never moves forward, just stays at "Download Pending" indefinitely. Happens with both file-based detection and script-based detection. Dependency app as well at parent app install fine via Intune on their own as well as manual testing. What We Need to Know: Does Intune get stuck in "Download Pending" instead of moving forward when dependency detection fails? Could the install context mismatch (dependency in SYSTEM, main app in USER) be causing this? Myth or fact? Does Intune break the install process if a dependency app is in system context and the parent app is in user context? Again, both apps work fine independent of each other. Thanks for any help!
Deploying Win32 Apps that use scripts to install - first install takes forever
I am trying to deploy some apps that use scripts packed in the intunewin package and deployed to Company Portal as Win32 apps. So far I use both .cmd and .ps1 script files, and at deployment to Intune these script files are called as the Install and Uninstall commands. My problem is that the first attempt to Install these apps through Company Portal takes forever to install, usually sitting in the "download pending... your device is syncing" stage for well over 30 minutes. However, once that first install completes, and thankfully it usually completes successfully, any subsequent app install that uses a script installer finishes with a much more appropriate speed where it is not sitting at "download pending" for a more than 1-2 minutes. The IME log does not have anything jumping out (TBH I don't really know what to look for though). Based on this article IME | Troubleshooting failed Intune Win32App installation it does not even look like any of the Win32 install steps begin until the long "download pending" cycle ends We also have both MS Store and Win32 apps that are straight up MSIs or EXEs. None of these exhibit the same first run "download pending" delay. This is only happening on the intunewin-wrapped installs that call a script to install the application. As mentioned before, this is exclusively a problem for the first time a script based application attempts to install from Company portal. Subsequent installers with scripts proceed without the excessive "download pending" delay. Can anyone help me figure what is causing this excessive "Download Pending" delay when installing Win32 apps that use a bundled script to install? Thanks!
In Grace Period- After Joining in Autopilot
I have 2 surfaces that I joined to Intune through Autopilot but they are showing as "In grace period". It should sync and should be in compliance and not sure why it says as in grace period. The applications are not downloading full that are being pushed. Could it be due to network issue and what about the grace period, how to fix it. thanks in advance
