Deploy Apps with Intune & App Stores
Once apps are prepared, it's time to push them to devices. Learn how Intune deploys apps and how to leverage platform-specific app stores for iOS, Android, and Windows.
How Intune deploys apps
Think of app deployment like a vending machine that knows your preferences.
When you assign an app as “Required,” it’s like the vending machine automatically dispensing your regular coffee every morning — no button press needed. When you assign it as “Available,” the coffee appears in the menu, but you choose when to press the button (install from Company Portal).
Different platforms have different vending machines: Windows uses the Intune Management Extension, iOS uses Apple’s MDM, Android uses Managed Google Play. But you configure everything from the same Intune admin center.
Deployment by platform
| Feature | Windows | iOS/iPadOS | Android Enterprise |
|---|---|---|---|
| Delivery mechanism | Intune Management Extension | Apple MDM + VPP | Managed Google Play |
| Silent install (Required) | Yes — background install | Yes (supervised) / Prompt (unsupervised) | Yes — auto-install in work profile |
| Self-service (Available) | Company Portal app or web | Company Portal app | Managed Google Play Store |
| Store apps | Microsoft Store (new) | Apple App Store via VPP | Managed Google Play |
| Volume licensing | Microsoft Store for Business (deprecated) | Apple VPP (Volume Purchase Program) | Managed Google Play (free distribution) |
| Update management | Supersedence or auto-update | App Store handles updates | Google Play handles updates |
Platform-specific app stores
Microsoft Store apps (Windows)
The new Microsoft Store integration in Intune lets you deploy Store apps directly:
- Intune admin center → Apps → Windows → Add → Microsoft Store app (new)
- Search for the app (e.g., “Windows Terminal”, “WhatsApp”)
- Assign as Required or Available
- Intune handles download and installation
Store apps auto-update through the Microsoft Store by default.
Apple App Store apps (iOS/iPadOS)
For iOS devices, apps are deployed through Apple Volume Purchase Program (VPP):
- Set up an Apple Business Manager account and link to Intune
- Purchase app licences in ABM (even free apps need licence assignment)
- Sync licences to Intune
- Assign apps to device or user groups
Supervised devices can receive silent app installs. Unsupervised devices prompt the user for consent.
Managed Google Play (Android)
For Android Enterprise devices:
- Link your Intune tenant to Managed Google Play (done during Android enrollment setup)
- Approve apps in the Managed Google Play console
- Apps sync to Intune
- Assign to user or device groups
- Apps appear in the work profile’s Play Store or install silently
Exam tip: app deployment timing
After assigning an app, how long before it appears on the device?
- Windows (Required): Next device sync (default every 8 hours, or force sync)
- iOS (Required, supervised): Next MDM check-in (typically within 1 hour)
- Android (Required): Managed Google Play syncs approximately every 30 minutes
- Available apps: Appear in Company Portal/Play Store at next sync — user installs on their own schedule
The exam may test timing expectations. Key: Required apps deploy automatically at the next sync. Force sync if you need it faster.
App monitoring and troubleshooting
After deployment, monitor app status in Intune admin center → Apps → Monitor:
| Status | Meaning |
|---|---|
| Installed | App successfully installed on device |
| Install pending | App assigned but not yet installed (waiting for sync) |
| Failed | Installation failed — check error code |
| Not applicable | Device doesn’t meet requirements (wrong OS, architecture) |
| Not installed | App assigned as Available but user hasn’t installed it |
Deep dive: common app deployment failures
Common issues Aroha encounters at CloudForge:
| Error | Likely Cause | Fix |
|---|---|---|
| 0x87D13B9F | App download timeout | Check device internet connectivity |
| 0x87D1041C | Detection rule mismatch | Verify detection rules match installed app |
| 0x80073CF9 | Package conflict | Another version of the app is already installed |
| App stuck at “Install pending” | Device hasn’t synced | Force sync via remote action |
| App shows “Not applicable” | Wrong requirements | Check OS version and architecture requirements |
🎬 Video walkthrough
Flashcards
Knowledge Check
Aroha assigns a Required Win32 app to all CloudForge devices at 2:00 PM. When will the app install?
Riko needs to deploy Slack to designers' personal iPhones (Entra Registered, not supervised). She assigns Slack as Required via VPP. What happens?
Next up: Microsoft 365 Apps: Deploy, Customize & Manage — deploying the Office suite through Intune with the ODT and M365 Apps admin center.