Windows Line of Business (LOB) Apps deployment via Intune- Step by step Guide

1 Introduction The Purpose behind this document is to build a step by step guide which helps in understanding deployment of MSI or Line of business apps via Intune for Windows 10 devices This is an end to end guide for creating MSI application in Intune via Azure portal. This guide includes: • Uploading the MSI LOB app to Intune • Create the app on Intune Configuring the app on Intune with Deployment or Assignment options • Deployment status check and End User Experience on Windows 10 machine • How to Troubleshoot with event logs and Pending Sync • How to get application installation status messages back to Intune console 1.1 Steps to deploy Apps via Intune In this e.g. we will be using 7 zip app to install it on windows 10 devices. • Step 1 – Upload LOB application to Intune. Uploading MSI LOB app to Intune is a very straight forward process. Login to Endpoint Manager admin Center and navigate > Apps -> Windows -> + Add button and select app type as “Line-of-Business app“. Click on “App package file” and browse to the MSI source file location and click on OK button as shown in the below screenshots.

• Step 2 – Create the app on Intune (Configuring the app on Intune with Deployment or Assignment options) Once the app has been uploaded on Intune, the next steps is to setup the app with App information” section along with details such as scope tags, assignments and actual review and create. There are a couple of mandatory fields which you need to fill in. Command line options are also available in this section. You have the option to use silent switch for MSI, but by default, Intune/MDM on Windows 10 will install the app as silent (without any user interaction or input). You also have an option to add the app logo Once all the settings are defined, click on the Create button to complete the MSI app creation process in Intune.

• Step 3 – Setup Scope Information This is not a mandatory field and can be left as default scope until and until the scopes are created without Intune to be used. This field is as per requirement.

• Step 4 – Setup Deployment or Assignment An assignment is a method which we use to deploy MSI applications to Windows 10 devices. You can deploy applications to Azure AD dynamic user groups or device groups. scenario, a AAD dynamic device group is targeted with the MSI LOB apps.

Other types of deployment available in Intune are • Available – User needs to go into company portal and trigger the installation • Not Applicable – Won’t Get Installed • Required – Get Installed forcefully without user interaction • Uninstall – Removes the app from the device • Available with or Without enrollment – Mobile Application Management (MAM) without MDM enrollment scenarios. • Step 5 – Review and Create Once all the settings are defined, it can be reviewed and then created so that the assignment can be triggered on the devices/users • Step 6 – Deployment status check and End User Experience on Windows 10 machine Windows 10 machines will get the new application deployment policy once the assignments hit’s the device and is online. This time varies from 8 to 24 hrs. based on the syn cycle settings on Intune. What is the option to speed up the application deployment to the machines? You need to sync with Intune services using the following method (manually). On the Windows 10 device You can go to “Settings – Access Work or School – Work or School Account – Info (click on this button)” and click on Sync. This will initiate Windows 10 machine sync with Intune services, and after a successful sync, the machine will get the latest application policies.

• Step 7 - How to Troubleshoot with event logs and Pending Sync Unlike SCCM/ConfigMgr deployments, we don’t have log files to look at the application installation status via MDM channel on Windows 10 machine. So, you need to rely on Company portal for troubleshooting MSI application troubleshooting. If the installation is waiting for “Pending Sync “. You can initiate a manual sync as I mentioned in the above paragraph to kick start the installation process immediately. For Other issues you can refer to Event logs – Windows Logs – Applications This is where all the MSI application installation status messages can be reviewed on the Windows 10 machine. • Step 8 - How to get application installation status messages back to Intune console To get the installation status of the MSI LOB apps to Intune, you need to sync work or school account with Intune services. The installation status will be blank in Intune blade unless the device is not synced with Intune. Initiate the sync via “Settings – Access Work or School – Work or School Account – Info (click on this button)” and click on Sync. Once the sync is completed successfully, you can try to check the Intune Device Install Status in Intune to check the status.