Applies to: Nerdio Manager for MSP (NMM) v2.0.1+

Overview

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Using Microsoft Intune you can manage your organization’s devices -mobiles, laptops, tablets, Cloud PCs and soon Azure Virtual Desktops. You can also configure policies to control various applications. For example, you can prevent emails from being sent to people outside your organization. Intune also allows your employees to use their personal devices for work. On personal devices, Intune secures your organization's data and isolates it from your personal data. 

NMM supports Win32 app management capabilities. To know more, refer Intune Win32 apps section.

Let us understand how we have integrated Intune apps in the NMM portal.

Enable Intune apps

Log into your account on the NMM portal. From the main menu, navigate to Settings->Integration page as shown below:

Scroll down on the "Integrations" page till you reach "Microsoft Intune" tile:

Intune application managed is disabled by default in your NMM install:

Click the link Disabled to enable the feature. You will be prompted to confirm your selection:

Once you click OK, the system will check if an Intune license is available in your tenant. If it is, it will proceed with enabling Intune and you will see a new menu option in the main menu on the left:

Also, you will see that the current status for Microsoft Intune is set to "Enabled":

Now, from the main menu on your account's page, select "INTUNE->Apps" as shown below:

You can manage Intune apps from this page:

Let's look at each option in detail:

• View Intune apps
• Add Intune app
  • Microsoft Store for Business apps
  • Line of Business apps
  • Intune Win32 apps
• Edit Intune app
• Delete Intune app
• View Intune app tasks

View Intune apps

Expand the Intune menu item and click Apps to view a list of existing Intune apps in your tenant (if any).

On this screen, you can search for existing Intune apps, edit or delete existing apps and add new apps.

You can hide the search section and make room for list section by clicking the double-arrow icon in the upper right of the screen. Clicking the Refresh icon will make the system retrieve the latest list of apps from Intune.

Add Intune app

Click the Add button to add a new Intune app. Select the app type first (Microsoft store app or Line-of-business app) from the drop-down shown below:

You must provide Name, Appstore URL and Publisher to create a new app. The description is optional but highly recommended. You may also choose to enter the users or devices via group membership the application will be installed to. Click Save and a new app entry will be created.

You can add three types of Intune apps:

Microsoft Store for Business apps

Microsoft Store for Business apps are modern apps, purchased from the Microsoft Store for your Business admin portal. They are then synced over to Microsoft Intune for management. If you select type as "Microsoft store app", you need to provide:

• • Name of the app: Enter a suitable name for the app
  • Appstore URL: Enter a URL
  • Publisher: Enter a publisher name
  • Groups(available): Select from drop-down
  • Description: Enter a short description
  • Click "Save" button once done as shown below:

Line of Business app

A line-of-business (LOB) app is an app that you add to Intune from an app installation file. This kind of app is typically written in-house. Note that LOB apps management is available in v2.3+. Intune installs the LOB app on the user's device. If you select type as "Line-of-business" app, you need to provide:

• • Select app package file
  • Name of the app: Enter a suitable name for the app
  • Publisher: Enter a publisher name
  • Choose option whether to ignore app version
  • Groups (required): Select from drop-down
  • Groups (uninstall): Select from drop-down
  • Description: Enter a short description
  • Click "Save" button once done as shown below:

Intune Win32 apps

To add a Win32 app to Microsoft Intune, you must prepare the app by using the Microsoft Win32 Content Prep Tool. The Microsoft Win32 Content Prep Tool helps you pre-process Windows classic (Win32) apps. The tool converts application installation files into the .intunewin format. You need to run the tool IntuneWinAppUtil.exe and generate a .intunewin file. To create/edit Intune Win32 apps on NMM, select type as "Windows app (Win32)" and provide: 

• Select file: Upload the .intunewin file (generated after executing IntuneWinAppUtil.exe utility) as an app package file
• Description: Enter a short description
• Name of the app: Enter a suitable name for the app
• Publisher: Enter a publisher name
• Choose option Yes/No whether to feature app
• Install Command: Provide code for app installation
• Select Install behavior: Select option System/User
• Uninstall command: Provide code for app uninstallation
• Restart behavior: Select option from drop-down
• Choose Return codes from the available options
• OS architecture: Select 32 bit or 64 bit
• Minimum OS: Select from drop-down
• Disk space required (MB): Enter size in MB to install app
• Physical memory required (MB):  Enter RAM size in MB to install app
• Detection rules: Click "+Add" to add up to 25 detection rules
• Groups (required) included: Select from drop-down and check "All users" or "All devices" checkboxes if required
• Groups (required) excluded: Select from drop-down
• Groups (uninstall) included: Select from drop-down and check "All users" or "All devices" checkboxes if required
• Groups (uninstall) excluded: Select from drop-down
• Click "Save" button once done as shown below:

Edit Intune app

Locate the app you want to edit and click the Edit button.

You can change the Name, Publisher, Description and available Groups. You can not change the Appstore URL of an app. Click Save to complete your changes.

Note: You can edit Intune Win32 apps through NMM except for custom detection scripts and filters that can only be managed through MEM portal.

Delete Intune app

Click "Delete" option on an existing Intune app. Click "OK" button on the pop-up to confirm deletion:

View Intune app tasks

You can view the status of various tasks under "Intune app tasks" section. You can search tasks by any text in the tasks or filter tasks by status (ALL STATUSES, PENDING, IN PROGRESS, COMPLETE, ERROR and CANCELLED). You can refresh tasks and also download them in JSON format:

To view more details for a task, simply click "Details" option:
You can even hide a task by clicking the "Hide" option. To "unhide" tasks, go to "Logs" and click "Unhide" option on the task.