3.3 KiB
title, description, ms.date, ms.topic
| title | description | ms.date | ms.topic |
|---|---|---|---|
| Configure applications with Microsoft Intune | Learn how to configure applications with Microsoft Intune in preparation for device deployment. | 01/16/2024 | tutorial |
Configure applications with Microsoft Intune
With Intune for Education, school IT administrators have access to diverse applications to help students unlock their learning potential. This section discusses tools and resources for adding apps to Intune for Education.
Applications can be assigned to groups:
- If you target apps to a group of users, the apps will be installed on any managed devices that the users sign into
- If you target apps to a group of devices, the apps will be installed on those devices and available to any user who signs in
[!div class="checklist"] In this section you will:
- Add apps to Intune for Education
- Assign apps to groups
- Review some considerations for Windows 11 SE devices
Add apps to Intune for Education
Intune for Education supports the deployment of two types of Windows applications: web apps and desktop apps.
:::image type="content" source="./images/intune-education-apps.png" alt-text="Intune for Education - Apps" lightbox="./images/intune-education-apps.png" border="true":::
Desktop apps
The addition of desktop applications to Intune should be carried out by repackaging the apps, and defining the commands to silently install them. The process is described in the article Add, assign, and monitor a Win32 app in Microsoft Intune.
Web apps
To create web applications in Intune for Education:
- Sign in to the Intune for Education portal
- Select Apps
- Select New app > New web app
- Provide a URL for the web app, a name and, optionally, an icon and description
- Select Save
For more information, see Add web apps.
Assign apps to groups
To assign applications to a group of users or devices:
- Sign in to the Intune for Education portal
- Select Groups > Pick a group to manage
- Select Apps
- Select either Web apps or Windows apps
- Select the apps you want to assign to the group > Save
Considerations for Windows 11 SE
Windows 11 SE prevents the installation and execution of third party applications with a technology called Windows Defender Application Control (WDAC). WDAC applies an allowlist policy, which ensures that unwanted apps don't run or get installed. However, it also prevents IT admins from deploying apps to Windows 11 SE devices, unless they're included in the E Mode policy.
To learn more about which apps are supported in Windows 11 SE, and how to deploy them, see the tutorial Deploy applications to Windows 11 SE with Intune.
Next steps
With the applications configured, you can now deploy students' and teachers' devices.
[!div class="nextstepaction"] Next: Deploy devices >