Share via


Silently push the Microsoft Intune Company Portal to Azure AD Joined Windows 10 devices

Starting today Microsoft Intune has been integrated with the Business Store. This means that you can use Microsoft Intune to manage public store applications and silently deploy them to users. End-user won’t have to go to the public store and therefore won’t need a Microsoft Account.  

When it comes to Microsoft’s Enterprise Mobility Suite it’s possible to use the Company Portal for a uniform cross-platform experience.

On Windows, installation of the Company Portal can be automated using the Business Store which is capable of pushing applications from the Public Store. We can use this to silently push any modern app from the public store, including the Company Portal, to the end-user’s Windows AAD joined (or Domain Join + AAD registration) 10 device. End-users won’t need an Microsoft Account (MSA) to obtain the application.

You configure this as follows:

1) Browse to https://microsoft.com/business-store and logon with an administrative user in your tenant.

2) Select settings and navigate to Management Tools

clip_image002

3) Select Add a management toolclip_image004

4) Search for Microsoft Intune

clip_image006

5) Press Ok followed by Activate in the bottom right corner

clip_image008

6) In the upper right Search Store textbox search for Company Portal, next select Get the app and afterwards select distribute later.

clip_image010

7) Open a new tab and navigate to Microsoft Intune via https://manage.microsoft.com

8) Navigate to Admin/Mobile Device Management/Windows/Store for Business and select Configure Sync

clip_image012

clip_image014

9) When for the initial sync to finish and navigate to Apps/Apps/Volume Purchased Apps

clip_image016

10) Now you can deploy the Company Portal as a required application to your user collection.

End result:image

Users on Windows devices that sign in with their Azure AD account (or PIN/Passport) or domain account that has been registered in AAD will get the Company Portal added in their Start Menu without having to do anything. And the best of all: without the need for a Microsoft Account to access the public store.

For more information:

Comments

  • Anonymous
    March 29, 2016
    Finally! Great News Pieter thanks for this update. Any news on when this will be available for Hybrid scenarios with ConfigMgr and Intune integration?
    Regards,
  • Anonymous
    March 30, 2016
    mathias - look in the next sccm tp
  • Anonymous
    April 15, 2016
    Now how do we get the Intune client to install automatically when a user joins the AD without an on premise server? haha
  • Anonymous
    April 19, 2016
    This functionality is one of the key pain points for us and I can't find an unassisted method.
  • Anonymous
    June 27, 2016
    I configured exactly as You but the app is not installed. Any guidance for troubleshooting?
    • Anonymous
      January 20, 2017
      The comment has been removed
  • Anonymous
    January 11, 2017
    It used to work for me but now in a new tenant I don't seem to get anything installed from the store via Intune. From the device management log:MDM ConfigurationManager: Command failure status. Configuration Source ID: (8CA1EED9-9CF5-493E-A98D-9B236E8E3C3B), Enrollment Name: (MDMDeviceWithAAD), Provider Name: (EnterpriseModernAppManagement), Command Type: (CmdType_Execute), CSP URI: (./User/Vendor/MSFT/EnterpriseModernAppManagement/AppInstallation/Microsoft.CompanyPortal_8wekyb3d8bbwe/StoreInstall), Result: (Bad request (400).).
  • Anonymous
    May 10, 2017
    Automatic deployment does not work anymore! I see an installation progress bar and stalls at approx 2/3 and then dissapears and thus not installed.