One of the challenges that I see in some of my customers is the ability to control mobile devices although most of them have a on-premises solutions to manage desktops in place, there are a huge gap to manage Mobile devices. Microsoft Intune is great solution to address this issue where from a cloud solution (just to make sure: no servers required on-premises) the administrator can deploy apps, wifi settings, vpn profiles, and of course manage settings.
In this Tutorial our focus is on the application deployment for iOS devices, and we are assuming that you already have access to your Intune portal (https://manage.microsoft.com). If you don’t you can always sign up for a 30ish day trial.
Creating the App
Before starting the app deployment using Microsoft Intune, we need to find the app on the Apple Store. A good way is using iTunes and finding the application on the store, in our example we will be installing Skype for Business, click on Get and then Copy Link.
Logged on the Microsoft Intune portal, click on Apps, and then on the right-side click on Apps item and a list of all existent apps will be listed on the right side. Click on Add App
You will have to accept to run an applet and perhaps re-authenticate, after going through that initial hassle the following welcome page will be shown. Click Next..
In the Software Setup page. Select Managed iOS App from the App Store, and paste the URL that we retrieve from the first step of this Tutorial. Click Next.
In the Software Description page. Fill out the software information, and we can select the logo (unfortunately the logo is not retrieved from the Apple Store). Click Next.
In the Requirements page. Select the type of device where the app will be available, in our Tutorial it was target to iPhone/iPod Touch (keep in mind that we select the app for iPhone from Apple Store). Click Next.
In the Summary page. Review the new package settings and click Upload.
In the Upload page. The result of the upload operation will be displayed, if everthing went okay, just click on Close.
Deploying the App…
Now that we have the new app (Skype for Business) being listed on the main page, select it and click on Manage Deployment. A new page will be displayed where the administrator can target the App to either an Active Directory group or a Device Group. Select the option and click Next.
In the Deployment Action page. We can select which action for each group, in this Tutorial we have a single group and we will force the installation. Click Next.
In the Mobile App Management page. If a previous Mobile Application Management Policy was created, then it is time to assign it here. It is a best practice to create one to assign to MAM supported applications like Skype for Business where the administrator can control some actions when the application is being executed, such as: copy and paste, screenshot and etc. Click Next.
In the VPN Profile page. If a VPN is in use, the VPN policy can be defined here, click Next.
In the Mobile App Configuration page. A policy for the Mobile App Configuration can be used, in our case we don’t have special policies for that purpose. Click Finish.