Configuration

Deployment Process Overview

Deployment processes are the key feature of Application Manager for Intune. With a deployment process, you can set deployment target groups and set deployment schedule for the application(s) selected to the deployment process.

You can configure deployment processes in Recast Portal by navigating to Services > AM for Intune > Administration > Deployment processes.

You can create as many deployment processes as you like and you can have the same application in multiple deployment processes. Make sure not to deploy the same application to the same group from different deployment processes.

Read more:




New Deployment Process

To create a new deployment process in Application Manager for Intune:

1. In Recast Portal, navigate to Services > AM for Intune > Administration > Deployment processes

2. Click to add a New deployment process.

3. Enter a Name for the deployment process and click Add.

4. Click on the deployment process name and select application(s) for the deployment process.

5. Go to the Deployments tab and click Add.

6. Find and select the Azure AD group you wish to use as a deployment target. Alternatively, you can use Intune's native All Devices or All Users target groups.

7. In the Edit window, configure deployment settings and scheduling and click Add.

8. Repeat steps to add additional target groups.

9. Click Start deployment now to import the application to Intune. 




Deployment Settings

You can configure deployment settings when you create a new deployment to a deployment process, or edit previously created deployment. From this article you can find information about every setting in deployment settings.

General Settings

  • Group
    • Target group name (cannot be changed)
  • Assignment mode
    • Include (Default)
    • Exclude (Group members are excluded from the deployment)
  • Install intent
    • Required (Default)
    • Available (Application will be available in Company Portal. Make sure to use user group)
    • Uninstall (Application will be uninstalled from the target group's members, if it's already installed)
  • End user notifications
    • Show toast notifications for computer restarts (Default)
    • Show all toast notifications
    • Hide all toast notifications
  • Delivery optimization priority
    • Content download in background (Default if the setting is empty)
    • Content download in foreground

Email notifications

  • Deployment created
    • Email notification about the specific deployment
  • Application created
    • Email notification about newly imported application
  • Errors
    • Email notification about application import errors

Restart settings

  • Grace period
    • Specify restart grace period for assignment
    • 1440 minutes is the default in Intune
  • Countdown dialog
    • Specify restart countdown dialog
    • 15 minutes is the default in Intune
  • Snooze duration
    • Specify the restart snooze duration
    • 240 minutes is the default in Intune

Scheduling

  • Time zone
    • UTC (Default)
    • Device time zone
    • Assignment scheduling time zone
  • Application availability (When the app is downloaded to Intune client) 
    • As soon as possible (Default)
    • Scheduled
      • Wait (How many days from the previous deployment step until the deployment starts)
      • Time (Configure time of day when the deployment starts)
      • Day of the week (Configure day of week when the deployment starts)
      • Day of the month (Configure day of month when the deployment starts)
  • Installation deadline (When the app is installed)
    • As soon as possible (Default)
    • Scheduled
      • Wait (How many days from the application availability time until app is installed)
      • Time (Configure time of day when the app is installed)
      • Day of the week (Configure day of week when the app is installed)
      • Day of the month (Configure day of month when the app is installed)

You can read more about restart settings and assignment schedules from Microsoft's documentation.




Application Settings

In application settings, you can configure installation parameters and other application settings that are available in Intune. You can configure application settings by navigating to Services > AM for Intune > Administration > Deployment processes in Recast Portal and selecting a deployment process. Open application settings on the Applications tab by selecting the Settings icon next to an application name.

Application settings:

App information

  • Description
    • Description is visible for the end user in the Company Portal app
    • If no description is set, AM for Intune will default to Application [APP NAME] published by integration client description
  • Show as featured app
    • Display the app prominently in the Company Portal

Program

  • Install parameters
    • These parameters will be added to the end of the installation command in Intune
    • With parameters, you can for example enable windows installer logging and configure application installer properties
    • The full installation command would look like this in Intune, if you've configured the /l*v %WINDIRD%\CSM_Reader_Install.log parameter:
      msiexec /qn /i filename.msi TRANSFORMS="filename.mst" /l*v %WINDIRD%\CSM_Reader_Install.log
  • Uninstall parameters
    • These parameters will be added to the end of the uninstallation command in Intune
  • Restart behavior
    • Change the restart behavior of the application in Intune. Read more from here
    • App install may force a device restart
    • Determine behavior based on return codes (Default if not set)
    • No specific action
    • Intune will force a mandatory device restart

Application settings will be the same in all deployment processes for the same application.

Application Groups

Application Groups can be used to automatically update applications deployed only into Company Portal as available type deployment.

For this feature to function, an additional consent from a Global Administrator is required.

Configuration Overview

  1. Configure additional permissions for the Application Groups feature.
  2. Configure Application Groups feature.

Once the feature is configured and an application is deployed into Company Portal:

  1. The user installs an application created by Application Manager for Intune from Company Portal.
  2. The application is installed on the user's workstation.
  3. The workstation is automatically added into the group corresponding to the installed application. This relationship is specified in AM for Intune Application Groups settings.
  4. All upcoming versions of the application will be automatically installed on the user's workstation through required type deployment.

To configure application groups:

  1. Create a new Azure AD group from Azure Portal for each application you want to update with Application Group feature. AM for Intune will update group members automatically.
    • Group type: Security
    • Membership type: Assigned
  2. In the Recast Portal, browse to Services > AM for Intune > Administration > AM Application groups.
  3. Click Create AM application group and search for the previously created Azure AD group to be used with the specific application.
  4. From the Application drop-down menu, select the application that corresponds to the specified group.
  5. Add the group into a new application specific deployment process from Services > AM for Intune > Administration > Deployment processes. You should use the deployment process to update only the specific application.
  6. Add the group to the application specific deployment process on the Deployments tab.
    • Search for the group and click Select.
    • Configure a deployment schedule and click Add. Make sure the assignment type is required.
  7. Make sure you have a deployment process that deploys the application into Company Portal with Available type deployment. Available type deployment should be targeted to the User group.
    • You can add available type deployment into the same deployment process as required deployment, or you can use a separate deployment process for all of your applications.




Suggested Deployment Processes

With Application Manager for Intune you have the freedom of creating deployment processes of your choice, but we have created a list of suggested deployment processes in 3 different scenarios.

  1. Deploy all applications to all devices
  2. Deploy most of the applications to all devices, with few exceptions
  3. Deploy applications as available into company portal and update previous installations from company portal with required deployment

This article doesn't go into details of deployment processes, but you can create deployment processes by following these instructions.


Scenario: Deploy all applications to all devices

  • This is the most common scenario and simplest to create. 
  • All you need in your environment is pilot and production groups
    • Pilot
      • Usually includes IT-personnel
    • Production 
      • Includes rest of the users or devices

In our example Adobe Reader, Google Chrome, VLC Media Player and Putty are deployed to all devices. Production deployments start one week after pilot deployment.

  • Applications tab
    • All applications are selected
  • Deployments tab
    • Pilot deployment is before production and both are assigned as required
    • Pilot deployment settings (install instantly)
    • Production deployment settings (installs 7 days after pilot deployment)

Scenario: Deploy most of the applications to all devices, with few exceptions

  • Common applications (browsers, pdf-readers, media players) are usually deployed to all devices, but you might have customized packages or applications that only specific users need
  • You need pilot and production groups
    • Pilot 
    • Production group for common applications
    • Production group(s) for other applications

In our example Adobe Reader, Google Chrome and VLC Media Player are deployed to all devices and Putty is deployed to IT and developers. Production deployments start one week after pilot deployment.

Common applications - Deployment process

  • Applications tab
    • Reader, Chrome and VLC Media Player are selected
  • Deployments tab
    • Settings are the same as in the first scenario
    • Pilot deployment settings (install instantly)
    • Production deployment settings (installs 7 days after pilot deployment)

Putty - Deployment Process

  • Applications tab
    • Only Putty is selected
  • Deployments tab
    • Application is deployed to AM - Pilot group and after 7 days to AM - Developers group
    • Pilot deployment settings (install instantly)
    • Production deployment settings for AM - Developers group. Installs 7 days after pilot deployment

Scenario: Deploy applications as available into company portal and update previous installations from company portal with required deployment

  • Separate deployment processes for every available application and one deployment process for available deployments
  • Uses our Application Groups feature. Read more about it here
    • You need to create an empty group into Intune for each of the applications
  • In addition to application specific groups, you need pilot and production groups
    • Pilot
      • Usually includes IT-personnel
    • Production (for available deployment) 
      • Includes rest of the users or devices
      • Make sure to exclude pilot users/devices from production group, if you use available deployments
  • Once a user installs the application from company portal, his/hers device will be automatically added into the group specified in application groups page
    • You can deploy the same application as required to this group so the application will be automatically updated in the future
  • You can combine this with another scenario

Application specific deployment process

  • Applications tab
    • Example deployment process is for Adobe Reader, but Google Chrome, Putty and VLC processes are identical except for the selected application and deployment group 
  • Deployments tab
    • Application is deployed to AM - Pilot group and after 7 days to AM - Reader group
    • Pilot deployment settings (install instantly)
    • Production deployment settings for Application Manager - Reader group. Installs 7 days after pilot deployment


Available deployment process. All applications selected

  • Applications tab
  • Deployments tab
    • Only one available type deployment for everyone. Application comes available at the same time as the required deployment for updating previous installations (7 days after pilot)
    • Deployment settings.