Merge pull request #16198 from MicrosoftDocs/main

Release Intune 2409

Author: dougeby

autopilot/dfci-management.md

@@ -89,6 +89,7 @@ For more information, see [Intune devices and apps API overview](/graph/intune-c
 - Fujitsu.
 - [Microsoft Surface](/surface/surface-manage-dfci-guide).
 - Panasonic.
+- VAIO.
 
 Other OEMs are pending.
 

memdocs/intune/apps/apps-add-enterprise-app.md

@@ -6,7 +6,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 09/11/2024
+ms.date: 09/16/2024
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: apps
@@ -33,9 +33,9 @@ The Enterprise App Catalog is a collection of prepackaged [Win32 apps](../apps/a
 When you add an app to Intune, you'll commonly want to use default installation, requirements, and detection settings. For apps within the Enterprise App Catalog, these default settings have been configured and confirmed by Microsoft. You must be careful if you modify the application properties as unexpected or harmful commands could be passed via the **Install command** and **Uninstall command** fields. In addition, changing the install commands might cause installation to fail.
 
 > [!IMPORTANT]
-> Microsoft does not assert compliance or authorizations for non-Microsoft apps. Customers are responsible for ensuring that apps meet their requirements.
+> Microsoft does not assert compliance or authorizations for apps distributed via Intune. Customers are responsible for ensuring that apps meet their requirements.
 
-Once you add an Enterprise App Catalog app to Intune, you can assign that app to end-users or devices. Intune silently adds the app to your tenant.
+Once you add an Enterprise App Catalog app to Intune, you can assign that app to end-users or devices.
 
 ## Add a Windows catalog app (Win32) to Intune
 
@@ -219,14 +219,33 @@ You can use scope tags to determine who can see client app information in Intune
 
 Click **Select scope tags** to optionally add scope tags for the app. Then select **Next** to display the **Review + create** step.
 
-## Step 6: Review and create
+## Step 6: Assignments
+
+You can select the **Required**, **Available for enrolled devices**, or **Uninstall** group assignments for the app. For more information, see [Add groups to organize users and devices](../fundamentals/groups-add.md) and [Assign apps to groups with Microsoft Intune](apps-deploy.md).
+
+> [!IMPORTANT]
+> For the scenario when a Win32 app is deployed and assigned based on user targeting, if the Win32 app requires device admin privileges or any other permissions that the standard user of the device doesn't have, the app will fail to install.
+
+1. For the specific app, select an assignment type:
+    - **Required**: The app is installed on devices in the selected groups.
+    - **Available for enrolled devices**: Users install the app from the company portal app or the company portal website.
+    - **Uninstall**: The app is uninstalled from devices in the selected groups.
+2. Select **Add group** and assign the groups that will use this app.
+3. On the **Select groups** pane, select groups to assign based on users or devices.
+4. After you select your groups, you can also set **End user notifications**, **Availability**, and **Installation deadline**. For more information, see [Set Win32 app availability and notifications](apps-win32-app-management.md#set-win32-app-availability-and-notifications).
+5. If you don't want this app assignment to affect groups of users, select **Included** under the **MODE** column. In the **Edit assignment** pane, change the **mode** value from  **Included** to **Excluded**. Select **OK** to close the **Edit assignment** pane.
+6. In the **App settings** section, select the **Delivery optimization priority** value for the app. This setting will determine how the app content will be downloaded. You can choose to download the app content in background mode or foreground mode based on assignment. 
+
+After you finish setting the assignments for the apps, select **Next** to display the **Review + create** page.
+
+## Step 7: Review and create
 
 1. Review the values and settings that you entered for the app. Verify that you configured the app information correctly.
 2. Select **Create** to add the app to Intune.
 
     The **Overview** pane for the LOB app appears.
 
-At this point, you've completed steps to add a Windows catalog app (Win32) to Intune. The next step is to assign the app and set the installation properties, such as end-user notifications, restart grace periods, and delivery optimization priority. For information about app assignment and monitoring, see [Assign apps to groups with Microsoft Intune](apps-deploy.md) and [Monitor app information and assignments with Microsoft Intune](apps-monitor.md).
+At this point, you've completed steps to add a Windows catalog app (Win32) to Intune. 
 
 ## Next steps
 

memdocs/intune/apps/apps-eam-supersedence.md

@@ -0,0 +1,66 @@
+---
+title: Guided update supersedence for Enterprise App Management 
+titleSuffix: Microsoft Intune
+description: Learn how to update an Enterprise App Catalog app using supersedence with Microsoft Intune. 
+keywords:
+author: Erikre
+ms.author: erikre
+manager: dougeby
+ms.date: 09/17/2024
+ms.topic: how-to
+ms.service: microsoft-intune
+ms.subservice: apps
+ms.localizationpriority: medium
+ms.assetid: 
+
+ms.reviewer: nicolezhao
+ms.suite: ems
+search.appverid: MET150
+ms.custom: 
+ms.collection:
+- tier1
+- M365-identity-device-management
+- FocusArea_Apps_EAM
+---
+
+# Guided update supersedence for Enterprise App Management
+
+Guided update supersedence for Enterprise App Management allows you to check for updates of Windows (Win32) Enterprise App Catalog apps. You can view an available update for the app and select the option to create a new app with a supersedence relationship for the app it’s updating. Prepopulated attributes are provided when creating the new app.
+
+## View available updates
+
+In the **Overview** pane for a selected Enterprise App Catalog app, you can view the available updates by selecting the tile **Enterprise App Catalog apps with available updates**.
+
+:::image type="content" alt-text="Screenshot the app's Overview pane with the tile 'Enterprise App Catalog apps with available updates'." source="./media/apps-eam-supersedence/apps-eam-supersedence-01.png" lightbox="./media/apps-eam-supersedence/apps-eam-supersedence-01.png" :::
+
+The **Enterprise App Catalog apps with updates** pane provides a list of Enterprise App Catalog apps that can be updated. This list provides the following app details:
+- **App name**: - The name of the app.
+- **Publisher**: - The publisher of the app.
+- **Provisioned version**: - The currently installed app version.
+- **Latest available version**: - The new version that is available.
+
+:::image type="content" alt-text="Screenshot the Enterprise App Catalog app list with available updates." source="./media/apps-eam-supersedence/apps-eam-supersedence-02.png" lightbox="./media/apps-eam-supersedence/apps-eam-supersedence-02.png" :::
+
+## Update an Enterprise App Catalog app
+
+1. To update an Enterprise App Catalog app, select the *app name* to display additional options.
+
+    You can update a specific app. This option allows you to update the app with a newer app version. Intune uses information from the Enterprise App Catalog to define properties and settings. You can review and define custom settings as needed. You should consider downloading and exporting the properties of the app before updated.
+
+    Superseding an app creates a new app with the latest app package and sets up the supersedence relationship. Some settings, such as scope tags and assignments won't be copied to the new app.
+
+2. Select the **Update** option for the specific app. 
+   The **Update application** pane is displayed.
+
+    :::image type="content" alt-text="Screenshot an Enterprise App Catalog app list the supersedence option." source="./media/apps-eam-supersedence/apps-eam-supersedence-04.png" lightbox="./media/apps-eam-supersedence/apps-eam-supersedence-04.png" :::
+
+3. Select **Supersede app**.
+
+4. Select your app **Assignments**, then **Review + create** the superseded app.
+
+## Next steps
+
+- [Microsoft Intune Enterprise Application Management](../apps/apps-enterprise-app-management.md)
+- [Add an Enterprise App Catalog app to Microsoft Intune](../apps/apps-add-enterprise-app.md)
+- [Troubleshoot Win32 app issues](apps-win32-troubleshoot.md)
+- [Monitor app information and assignments with Microsoft Intune](apps-monitor.md)

memdocs/intune/apps/apps-enterprise-app-management.md

@@ -35,7 +35,7 @@ Microsoft Intune Enterprise App Management enables you to easily discover and de
 The Enterprise App Management provides the following benefits:
 
 - **Streamlined app management**: You can save time and reduce complexity by streamlining the app management process. Discover and add apps directly from the Intune console.
-- **Stay current with updates**: You're able to keep apps up-to-date by easily creating apps for the new versions of products as they're available in the catalog.
+- **Stay current with updates**: You're able to keep apps up-to-date by easily creating apps for the new versions of products as they're available in the catalog. Use the **Enterprise App Catalog apps with updates** report.
 
 When you add an Enterprise App Catalog app, Intune prefills the following installation details:
 
@@ -92,7 +92,7 @@ You can also upvote an application previously submitted by someone else. Applica
 
 ### Where are the devices downloading the app content from?
 
-Microsoft hosts the applications in Microsoft storage.
+Microsoft hosts the applications in Microsoft storage accessible through `*.manage.microsoft.com`. For the full list of network requirements, see [Network endpoints for Microsoft Intune](../fundamentals/intune-endpoints.md?tabs=north-america).  
 
 ### Is Microsoft providing security around any of the content provided in the Enterprise App Catalog?
 
@@ -110,17 +110,13 @@ At this time, Intune provides no running application detection.
 
 No SLA is currently available.
 
-### How many applications are in the catalog?
-
-At the time of general availability (GA), Microsoft expects to have 100 applications available in the Enterprise App Catalog. More apps are available on an ongoing basis.
-
 ### How can working with the applications in Enterprise App Catalog be automated?
 
-Graph API will be available soon after general availability.
+Graph API is planned to be available soon.
 
 ### Will Enterprise catalog apps automatically update to a new version when a new version is available in the Enterprise app catalog?
 
-No, the created app remains at the version it was created at so the IT Pro can have full control over the experience.
+Updates are shown in Monitor report under Enterprise App Catalog apps with updates. The updates won't be applied automatically. You still need to go in and create a new app with supersedence relationship.
 
 ### Can you get licensed applications from this catalog?
 
@@ -140,7 +136,7 @@ No. Enterprise App Catalog apps are directly installed by the Intune management
 
 ### How do I update my Enterprise App Catalog app?
 
-You can configure what experience you want related to uninstalling the previous version, however the behavior of the application upgrade is controlled by the vendor. 
+For applications that don’t update themselves, you can view the upgrades that are available for the EAM app via supersedence.
 
 ### After several hours, what can I do if my app continues to show that it isn't ready and that the requested content is still being prepared?
 

memdocs/intune/apps/apps-monitor.md

@@ -8,7 +8,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 12/01/2023
+ms.date: 09/17/2024
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: apps
@@ -52,14 +52,18 @@ Intune provides several ways to monitor the properties of apps that you manage a
 In the app pane, you can review details about the status of an app in your environment.
 
 ### Essentials
-The **Essentials** section contains the following information about the app:
+The **Essentials** section provides the following information about the app if applicable:
 
  | **App details**            | **Description**                                                      |
 |------------------------|------------------------------------------------------------------|
 | **Publisher**          | The publisher of the app                                            |
 | **Operating system**   | The app operating system (Windows, iOS/iPadOS, Android, and so on) |
+| **Version**            | If applicable, the version number of the app |
+| **MAM SDK enabled**    | If applicable, whether the app uses the Intune MAM SDK (**Yes** or **No**)                  |
 | **Created**             | The date and time when this revision was created <b>**Note**: This date value is updated when an IT admin changes app metadata, such as changing the app category or app description.                        |
-| **Assigned**           | Whether the app has been assigned (**Yes** or **No**)                  |
+| **Assigned**           | Whether the app has been assigned (**Yes** or **No**)          
+| **App package file**   | If applicable, the app package file name            |
+
 
 ### Device and user status graphs
 The graphs show the number of apps for the following status:

memdocs/intune/apps/apps-supported-intune-apps.md

@@ -6,7 +6,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 07/29/2024
+ms.date: 09/16/2024
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: apps
@@ -229,7 +229,7 @@ The following apps support the core Intune App Protection Policy settings. Apps
 | :::no-loc text="MyQ Roger: OCR scanner PDF"::: <p><img alt="Partner app - MyQ Roger: OCR scanner PDF icon." src="./media/apps-supported-intune-apps/icon-p-myqroger.png" width="100"> | Scan all your documents with a few clicks using a smartphone, save them in your device or to your favorite cloud services (OneDrive, iCloud, Google Drive, Dropbox, or Box), and carry them wherever you go. MyQ Roger is your digital workplace assistant, allowing you to have the office in your pocket. This free app simplifies your life: at work, during studies, and on daily personal activities. Download MyQ Roger now and scan your own way. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=cloud.myq.roger&hl=en&gl=US),<br>[App Store link (iOS)](https://apps.apple.com/us/app/myq-roger-ocr-scanner-pdf/id1543934608) |
 | :::no-loc text="Nexis Newsdesk&trade; Mobile"::: <p><img alt="Partner app - Nexis Newsdesk Mobile icon" src="./media/apps-supported-intune-apps/icon-p-nexis-work.png" width="100"> | Newsdesk delivers relevant news from all media types – online, print, social, and broadcast – in a single destination. With the Newsdesk mobile app you will:<br><ul><li>Be in the know while on the go</li><li>Enjoy a seamless experience between mobile and web</li><li>Access headlines and extracts of articles right in the app</li><li>Easily share articles</li><li>Tag favorite feeds or save articles to read later</li><li>See which favorite searches have new coverage</li></ul> | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.lexisnexis.newsdesk),<br>[App Store link (iOS)](https://apps.apple.com/us/app/nexis-newsdesk-mobile/id1567099763) |  
 | :::no-loc text="Nine Work for Intune"::: <p><img alt="Partner app - Nine Work for Intune icon" src="./media/apps-supported-intune-apps/icon-p-nine-work.png" width="100"> | Nine is a full-fledged email application for Android based on Direct Push technology to synchronize with Microsoft Exchange Server using Microsoft Exchange ActiveSync, and also designed for entrepreneurs or ordinary people who want to have efficient communication with their colleagues, friends, and family members at any time, anywhere. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.ninefolders.hd3.work.intune) |  
-| :::no-loc text="Notate for Intune"::: <p><img alt="Partner app - Notate for Microsoft Intune icon" src="./media/apps-supported-intune-apps/icon-p-notate.png" width="100"> | Notate is the ultimate Exchange Information Manager. Go paperless and improve collaboration. Let Notate advance your digital transformation. | [App Store link (iOS)](https://apps.apple.com/app/notate-for-microsoft-intune/id1511979523) | 
+| :::no-loc text="Notate for Intune"::: <p><img alt="Partner app - Notate for Microsoft Intune icon" src="./media/apps-supported-intune-apps/icon-p-notate.png" width="100"> | Notate is the ultimate Exchange Information Manager. Go paperless and improve collaboration. Let Notate advance your digital transformation. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.shafersystems.notate.intune&hl=en_US),<br>[App Store link (iOS)](https://apps.apple.com/app/notate-for-microsoft-intune/id1511979523) | 
 | :::no-loc text="Now Mobile - Intune"::: <p><img alt="Partner app - Now Mobile for Intune icon" src="./media/apps-supported-intune-apps/icon-p-now-mobile.png" width="100"> | Now employees can find answers and get work done across IT, HR, Facilities, Finance, Legal and other departments, all from a modern mobile app powered by the Now Platform<sup>&#174;</sup>.<p>The Now Platform<sup>&#174;</sup> delivers employee experiences and productivity through digital workflows across departments, systems and people.<p>Examples of things you can do in the app:<ul><li>IT: Request a laptop or a reset password</li><li>Facilities: Find and book a conference room</li><li>Finance: Request a corporate credit card</li><li>Legal: Have a new vendor sign a non-disclosure agreement (NDA)</li><li>HR: Find the next company holiday and check the vacation policy</li></ul><p>Now<sup>&#174;</sup> Mobile powered by the Now Platform<sup>&#174;</sup> - finally work life can be as great as real life | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.servicenow.requestor.mam.intune),<br>[App Store link (iOS)](https://apps.apple.com/app/now-mobile-intune/id1494183300) | 
 | :::no-loc text="OfficeMail Go"::: <p><img alt="Partner app - OfficeMail Go icon" src="./media/apps-supported-intune-apps/icon-p-officemail.png" width="100"> |OfficeMail Go is an email client app that uses ActiveSync and is integrated with Microsoft Intune. It is not only a secure and safe email client, but also an app that helps reinforce various convenience aspects. The app implements several features, including a shared mailbox and calendars for collaborating with your colleagues. Additionally, OfficeMail Go provides secure email for business use and powerful functions that support Microsoft Exchange Server and Microsoft 365. It also provides internal apps such as email, calendar, contacts, tasks, and notes in Microsoft Exchange.<p>OfficeMail Go is compatible with MDM solutions such as Microsoft Intune, AirWatch, Citrix, and MobileIron based on Android Enterprise. Additionally, the Intune SDK is integrated into the app, and it supports Intune app protection policies. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=app.officemail.go) | 
 | :::no-loc text="Omnipresence Go"::: <p><img alt="Partner app - Omnipresence Go icon" src="./media/apps-supported-intune-apps/icon-p-omnipresence.png" width="100"> | Omnipresence is a Customer Experience Management platform for Life Sciences companies. You can use Omnipresence CXM to engage with customers and patients of Life Sciences companies. <p>Omnipresence is built by life sciences experts who understand pharma, biotech, and med-device business needs and compliance requirements. As a unified platform, functional teams can work together using a shared view of their customers and plans across devices, online and offline, in harmony with their Microsoft applications. By using Omnipresence, you can focus on enabling great customer experiences based on advanced analytics and AI that deliver insights to enrich every stage of the customer journey.| [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.omnipresence.live),<br>[App Store link (iOS)](https://apps.apple.com/in/app/omnipresence-technologies/id1504126395#?platform=iphone) |