| title | Tenant attach - Applications in the admin center |
|---|---|
| description | Install applications for uploaded Configuration Manager devices from the admin center. |
| ms.date | 07/11/2022 |
| ms.topic | install-set-up-deploy |
| ms.subservice | core-infra |
| ms.collection | tier3 |
Applies to: Configuration Manager (current branch)
The Microsoft Intune family of products is an integrated solution for managing all of your devices. Microsoft brings together Configuration Manager and Intune into a single console called Microsoft Intune admin center. From the Microsoft Endpoint Management admin center, you can initiate an application install in real time for a tenant attached device.
:::image type="content" source="media/6024389-tenant-attach-application-list.png" alt-text="Screenshot of applications in Microsoft Intune admin center." lightbox="media/6024389-tenant-attach-application-list.png":::
Note
Starting in version 2111, this behavior also supports application groups. When this article refers to an application, it also applies to app groups.
- All of the prerequisites for Tenant attach: ConfigMgr client details.
- An application that meets one of the following requirements:
- Is deployed to the device
- Is deployed to a user that's logged in to the device, primary user of the device, and applications previously installed for the user
- When you have a large number of device available applications, using the An administrator must approve a request for this application on the device on application deployments is recommended. For more information, see Display all applications for a device in the admin center.
The user account needs the following permissions:
- The Read permission for the device's Collection in Configuration Manager.
- Apply the permission to both targeted device collections and targeted user collections.
- The Read permission for Application in Configuration Manager.
- The Approve permission for Application in Configuration Manager.
- An Intune role assigned to the user
You can filter the application list based on the status. The application status can be one of the following labels:
- Available: The application has never been installed on the device.
- Installed: The application is installed on the device.
- Installing: The application is currently installing.
- Install requested: The installation has been requested, but the client hasn't acknowledged the request yet.
- If the device is offline, the install request will be acknowledged once it comes back online and receives the policy.
- Failed: The application installation failed.
- Requirements not met: The application requirements haven't been met.
- Not installed: The application isn't currently installed. Typically this status is seen if a different deployment or a user removed the application.
- Restart pending: The application is installed but needs a restart to complete.
- Required: Installation is required for the application
- In a browser, sign in to the Microsoft Intune admin center.
- Select Devices then All Devices.
- Select a device that is synced from Configuration Manager via tenant attach.
- Select Applications.
- Select the application and choose Install.
You can export all of the data currently in the view into a .csv file. At the top of the page, select the Export option to create the file. If the view exceeds 500 rows, only the first 500 are exported.
User available applications appear in the Applications node for a ConfigMgr device. The list of applications available for the device also includes applications deployed to the device's currently logged on user.
Deploying applications to a user has the following limitations:
- Multi-user session scenarios aren't supported.
- Microsoft Entra joined devices aren't currently supported.
- Devices that are both domain joined and Microsoft Entra joined are supported.
Administrators can do the following actions for applications in the Microsoft Intune admin center:
- Uninstall an application
- Repair installation of an application
- Re-evaluate the application installation status
- Reinstall an application has replaced Retry installation
:::image type="content" source="./media/7979972-application-repair.png" alt-text="Screenshot of application installation options in the Microsoft Intune admin center" lightbox="./media/7979972-application-repair.png":::
- Install the latest version of the Configuration Manager client
- Targeted clients need to be online
- To uninstall an application:
- The application must have at least one deployment type with the uninstall command defined
- Required deployments of the application can't be targeted to the client
- The application must currently be installed on the device
- To repair an application:
- The application must have at least one deployment type with the repair command defined
- The application must currently be installed on the device
- Sign in to the Microsoft Intune admin center.
- Go to Devices then All Devices.
- Select a device that is synced from Configuration Manager via tenant attach.
- Choose Applications.
- Select the application then one of the following actions you want to perform on the device:
- Reinstall
- Re-evaluate
- Uninstall
- Repair
The Applications view for a tenant attached device in Microsoft Intune admin center displays more applications from Configuration Manager. This improvement allows you to review when application installations are expected to occur on a device. Displayed applications include applications that are:
- Deployed to the device
- Deployed to a user that's logged in to the device, primary user of the device, or was previously installed.
:::image type="content" source="./media/8795301-display-required-app.png" alt-text="Screenshot showing details about required deadlines for applications in Microsoft Intune admin center":::
The option, An administrator must approve a request for this application on the device, is no longer required to be set on the device available deployment for applications to be listed in the admin center. However, we recommend using the An administrator must approve a request for this application on the device option on application deployments when you have a large number of device available applications. By using this option, it defers targeting a new policy to the client until installation is initiated by the admin. By not targeting a large number of application policies to the client, it increases the performance of the site servers and the client. For more information about determining installation behavior, see When will the application install on the device?.
- Sign in to the Microsoft Intune admin center.
- From Devices > All devices, choose a device managed by ConfigMgr.
- Select Applications then select an application that has a Status of Required.
- Review the details of the schedule for the installation of the application.
The displayed application and available actions are dependent on the version of Configuration Manager. Use the chart below to help determine what applications and actions are available in the admin center:
| Configuration Manager version | Applications displayed | Available actions |
|---|---|---|
| Configuration Manager version 2010 with devices running client versions before 2010 | Device-available applications with the An administrator must approve a request for this application on the device option set on the deployment. All user-available applications |
Install Reinstall |
| Configuration Manager version 2010 with devices running 2010 client versions | Device-available applications with the An administrator must approve a request for this application on the device option set on the deployment. All user-available applications |
Install Reinstall Re-evaluate Uninstall Repair |
| Configuration Manager version 2103 with devices running 2006 or earlier client versions | All applications targeted to the device All user targeted applications related to the device. For example, applications targeted to the logged in user, primary user, and applications previously installed for the user are displayed. |
For user and device-available applications with the An administrator must approve a request for this application on the device option set on the deployment: Install Reinstall All other applications display status but no actions are available |
| Configuration Manager version 2103 with devices running 2010 or later client versions | All applications targeted to the device All user targeted applications related to the device. For example, applications targeted to the logged in user, primary user, and applications previously installed for the user are displayed |
Install Reinstall Re-evaluate Uninstall Repair |
Use the following table to determine installation behavior on the device when you install an app from the admin center:
| Deployment options | Client requires policy sync before installation | Client must be online to queue the installation |
|---|---|---|
| Device required | Yes | Yes |
| Device available | Yes | Yes |
| Device requires approval | No | No The installation will occur when the client next comes online |
| User required | Yes | Yes |
| User available | No | No The installation will occur when the client next comes online |
| User requires approval | No | No The installation will occur when the client next comes online |
Superseded applications will display on the Applications page. However, the superseding application will be installed on the device. For instance, ApplicationA is superseded by ApplicationB. An administrator selects ApplicationA for installation on the device. ApplicationB is installed on the device.