Enforce auto update for Apps in iOS devices via intune.
I'm managing my corporate devices via Intune, and according to our internal policy I have disabled the App Store and allow app instillation via company portal only to control the allowed apps.
I have problem with apps' updates, because App Store is disabled, Apps are not being updated, although I update the apps to the latest version in the company portal.
It will be necessary to be able to manage/control apps update via intune.
plz ms give teh update plz . Y U DO DIS ?
MICROSOFT - SORT THIS OUT PLEASE!!!! HOW CAN YOU HONESTLY PUSH OUT A MDM WITHOUT THE ABILITY TO FORCE UPDATE APPS WITH OR WITHOUT THE APP STORE!!
Someone said that this is fixed in 1912 Intune release. As far as I can see the only thing that has changed is that Intune shows a new message in "Device install status" that says "An app update is available. Advice the user to update the app using the company portal".. which isn't a fix for the problem.
I've been told by MS recently that a fix is in the 1912 Intune release which we have just gone to but its still not working as yet. Also, for Company Portal versions, we ran into the outdated app issue and were recommended by MS to make Company Portal App required by all devices, this will keep it up to date, seems to be working for us and no prompts for supervised devices. Unsupervised devices will get a Manage prompt.
its huge that we still dont got this feature while other MDM software does support this. Required and important app updates can just "not be installed" without waiting 1 - 2 days since intune does "decide" to auto install the update.
Is there really nothing we can do to trigger the auto update?
There's still no solution at this time.
See also https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/38390305-automatically-update-ios-vpp-apps-deployed-as-ava which is essentially the same problem and related https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/34214632-ability-to-update-specific-vpp-app-on-one-device-o
Has there been any solution found to this problem? We have approx 800 devices under management within inTune so resetting them all is not realistic. Getting growing numbers of people reporting that the Company Portal requires updating but they are not able to do it, as it has been pushed out from inTune so their AppleID on the device is not valid for doing the update. Ideas?
How often will the app get outdated though? Is this going to be a one time thing where I need to reset all of my devices or will it happen literally every time there is a update to the CP app?
Alex Janes commented
Just had a bunch of phones that need reset, because the Company Portal app went out of date. Why is this not automatically updated by Intune without the App Store?
The main problem for us is that die company portal doesn't update itself and stops working when it gets outdated.
We've rolled out out devices via VPP/DEP, but our users get redirected to AppStore to update the Company Portal App and get prompted to sign in with an AppleID...
Agreed, it would be great to have one button in Company Portal like other MDM providers that the end user clicks and then all apps are updated.
The problem I have with forcing updates is if a user is out of country and all the apps start updating, this could be costly as they might not be on Wi-Fi and data would be used. Also, if they are in a bad signal area, apps could get stuck when installing if forced.
We need an update on this.
- Intune currently offers no simple way to make a larger number of apps available to users throught the company portal via "Available" install intent while maintaining that these apps stay updated and thus secure. This means that intune also offers no way to maintain control over app updates while disabling the app store at the same time in order to prevent giving up even more control over apps and updates.
- Even if that's the case, users cannot even be directed easily to "update all" of the "Available"-intent apps at once, but would have to install the new version for each app separately. That's not realistic to achieve and unreliable.
- At the same time, this "coincidence" is the only way in Intune to somewhat control that an app does not update but rather stay on a specific version, if the app comes via VPP.
Allow forcing updates of VPP apps with Install Intent "Available" to be a) configured globally (one checkbox) and on a per-app basis administratively in the app assignment.
Some manufacturers have apps that are dependent on a customer maintained backend service, but the backend may not yet have been migrated to the version for the newest client app version. In this case, an aggreement with the manufacturer either handing over binaries for an intune LoB app or the manufacturer only offering a specific app version in the apple b2b app store is the only option and not guaranteed to work either. Intune has neither a compliance control to enable alerting that a specific App version is present/not present nor a mechanism to controll whether an app should be installed in a specific version nor means to controll if it is being updated at all for Available-intent.
Customers want to be able to offer a "corporate app catalog" through the company portal app and be able to globally control whether updates will be installed and in some cases, on a per-app basis, to specifically control whether an update should currently be performed or not (true/false).
Trying to add a sn and getting a error, unable to add, device not accessible "
We really need this to get updated. I need to have the ability to control app installs and have them update as they come out. The Comp Portal itself will not update when the App Store is hidden and that creates a bigger issue since it won't launch unless updated.
MS fix this and add it to Intune device management.
Apparently this seems to be the INTENDED behaviour by design! *jaws dropped to the floor*
"Automatic app updates for Apple VPP apps will automatically update only apps deployed with Required install intent. For apps deployed with Available install intent, the automatic update generates a notification for the admin informing that a new version of the app is available. Additionally, the user will see that the app as not installed on Company Portal, even though an earlier version of the app is installed. In this case, the user can reinstall the app by clicking Install on the app details screen in the Company Portal app to install the newer version of the app."
How did that idea even get up on the planning board in the first place?
Any update MS
Reinier van der Beek commented
We need this function as well.
Chris Hawken commented
I have been trying to get this working for a while now as it fills the portal with errors and especially with the latest Whatsapp vulnerability added pressure to ensure applications were updated.
So here is is what i've done.
I reviewed the applications that i made available and made the decision which other ones could be made as required as this enforces the application and any updates to the phone
With the other applications that were just going to be kept as available i created additional Security Groups for example (Intune - IOS Google Maps) and all people that had installed the applications i added to the group and this enforce the updates to their phones but ensuring its not forced on all phones
I know this does mean keeping on top of it but does get the applications installing the updates
Anyone trying to uninstall a unwanted application remove from the group and uninstall it
Hope it helps some of you - works for me until we get a permanent fix
I don't know if this has been the case all the time but I have noticed that in the Company portal the apps with an update has a [Retry install]-button with an error message saying "Failed to install" and if the user clicks that button the latest version is installed. This button is different from the normal one that says [Re-install]. So the functionality is there but it just fails to execute automatically?
Could someone from Microsoft chime in on this as to whether this will ever be resolved