Microsoft Intune Enterprise App Management enables you to easily discover and deploy applications and keep them up to date from the Enterprise App Catalog. The Enterprise App Catalog is a collection of prepared Microsoft and non-Microsoft applications. These apps are Win32 apps that areprepared as Win32 apps and hosted by Microsoft.

Benefits of Enterprise App Management

The Enterprise App Management provides the following benefits:

• Streamlined app management: You can save time and reduce complexity by streamlining the app management process. Discover and add apps directly from the Intune console.
• Stay current with updates: You're able to keep apps up-to-date by easily creating apps for the new versions of products as they're available in the catalog. Use theEnterprise App Catalog apps with updates report.
• Windows Autopilot integration: Enterprise App Catalog apps are supported with Windows Autopilot. Microsoft Intune Enterprise App Management enables IT admins to easily manage applications from the Enterprise App Catalog. Using Windows Autopilot, you can select blocking apps from the Enterprise App Catalog in the Enrollment Status Page (ESP) and the Device Preparation Page (DPP) profiles. This feature allows you to update apps more easily without needing to update those profiles with the latest versions.

When you add an Enterprise App Catalog app, Intune prefills the following installation details:

• Commands to install and uninstall the app
• Time required to install the app
• Option to allow app uninstallation by the end user
• Installation and device restart behavior
• Return codes to indicate post-installation behavior
• Whether to install the app for system or user

Microsoft Intune prefills the detection rules that devices must meet before the app is installed:

• File size
• File version
• Registry

Also, Intune prefills the requirements that devices must meet before the app is installed:

• Windows OS architecture required
• Minimum OS required

You can also configure app specific rules used to detect the presence of the Enterprise App Catalog app. You can choose to either manually configure the detection rules or use a custom script to detect the presence of the app before installing the app.

Self-updating apps

The Enterprise App Catalog includes apps that self update. Intune ensures the app is at least at a target minimum version, and considers the app installed if the detected version of the app is at or above the minimum version. Self-updating apps update on client devices based on the vendor's process. Intune reports the version of the app detected on the device.

Frequently asked questions (FAQ)

How can I request to add an application to the Enterprise App Catalog?

We added a category to theMicrosoft Feedback Portal that allows you to submit application requests, suggest changes, and share any other feedback about Enterprise application management. We recommend you filter the feedback portal underCategories by selectingEnterprise App Management (Intune add-on) to successfully route your requests and feedback.

To request adding an application to the Enterprise app catalog use theMicrosoft Feedback Portal. The feedback portal gives Microsoft the ability to communicate with you on the status of your request and other communication about your request.

Include the following details when requesting to add an application:

• Application publisher
• Application name
• Download URL

You can also upvote an application previously submitted by someone else. Applications with large numbers of votes receive the most consideration and effort to be added to the catalog. However, priority depends on complexity of the applications mechanics.

Where are the devices downloading the app content from?

Microsoft hosts the applications in Microsoft storage accessible through*.manage.microsoft.com. For the full list of network requirements, seeNetwork endpoints for Microsoft Intune.

Is Microsoft providing security around any of the content provided in the Enterprise App Catalog?

Microsoft doesn't assert compliance or authorizations for apps distributed via Intune. Customers are responsible for ensuring that apps meet their requirements.

What app installer types are in the Enterprise App Catalog?

The apps currently provided in the Enterprise application catalog are Windows Win32 applications (exe and msi).

How will Microsoft detect if an application from the Enterprise App Catalog is in use?

At this time, Intune provides no running application detection.

What are the Service Level Objectives for when an app update is available in the catalog?

Service Level Objectives (SLOs) define target timelines for making app updates available in the Enterprise App Catalog between when Microsoft receives them to when they're made available in the Enterprise App Catalog. Unlike Service Level Agreements (SLAs), these are guidelines, not guarantees. SLOs allow customers to plan typical app update processing timelines.

The SLO measurement window starts at ingestion, the point when the app update is first received from the data source and logged in the EAM system.

App Update Process Flow

1. Ingestion – App update is received by Microsoft
2. Automated Validation – Compatibility and compliance checks
3. Manual Validation - Additional testing if needed
4. Catalog Availability – App update published to Enterprise App Catalog

Automated Validation

Most apps undergo automated validation checks.

• Target: 80–90% of app updates are processed and available in the Intune portal within 24 hours of ingestion.

Manual Validation Apps

If an app fails automated checks, it moves to manual validation and requires additional testing. Updates requiring manual testing and approval are completed within 7 days.

Exception Handling

• High-usage or critical apps that fail automated validation are prioritized for expedited processing (goal of 48 hours.)
• Apps that fail both automated and manual validation don't meet SLO and are flagged as unsupported.

How many applications are in the catalog?

For a complete list of applications, seeApps available in the Enterprise App Catalog.

How can working with the applications in Enterprise App Catalog be automated?

You can use Microsoft's Graph API to work with applications in Enterprise App Catalog. For more information, seeWorking with Intune in Microsoft Graph.

Will Enterprise catalog apps automatically update to a new version when a new version is available in the Enterprise app catalog?

Updates are shown in Intune by selectingApps >Enterprise App Catalog apps with updates. The updates aren't applied automatically. You still need to go in and create a new app with supersedence relationship.

Can you get licensed applications from this catalog?

Yes. You can get licensed applications from the Enterprise App Catalog, although you're responsible for purchasing the license from the vendor and distributing it to your organization. Intune doesn't perform a license check on Enterprise App Catalog apps.

Can Enterprise App Management be purchased standalone?

Yes. Enterprise App Management can be purchased as a standalone SKU or as part of the Microsoft Intune Suite.

Can Enterprise App Management be used with Microsoft Configuration Manager?

Enterprise App Management is only provided by Microsoft Intune. Configuration Manager doesn't directly support Enterprise App Management apps. However, co-managed clients can get Enterprise App Catalog apps when targeted from Microsoft Intune.

What happens if an app is removed from the Enterprise App Catalog?

Occasionally, app vendors might request removal of their applications from the Enterprise App Catalog. When this happens:

• Existing deployments remain unaffected: Apps that are already deployed to your tenant and user devices continue to function normally.
• No new deployments: You can't deploy new instances of the removed app from the Enterprise App Catalog.
• Alternative solutions: For future deployments, work directly with the app vendor or use traditional Win32 app deployment methods.

Does Enterprise App Management useWinget?

No. Enterprise App Catalog apps are directly installed by the Intune management extension (IME).

How do I update my Enterprise App Catalog app?

For applications that don't update themselves, you can view the upgrades that are available for the Enterprise App Management (EAM) app via supersedence.

After several hours, what can I do if my app continues to show that it isn't ready and that the requested content is still being prepared?

If the app content hasn't synced after several hours, delete the app and try again.

Is there an Intune report available to view details about the Enterprise App Catalog apps for a specific device?

Yes, the Managed Apps report provides a report of apps on a specific device that are currently installed, not installed, or available for install. For the device, the report provides details about the application, version, resolved intent, and installation status. For more information about this report, seeManaged Apps report.

Apps available in the Enterprise App Catalog

There are various applications available in the Enterprise App Catalog. To view the current application list inMicrosoft Intune admin center, seeAdd a Windows catalog app (Win32) to Intune.

More apps will be available on an ongoing basis in the Enterprise App Catalog.

The following table of Enterprise Apps is available within Intune:

Next steps

• Add an Enterprise App Catalog app to Microsoft Intune
• Monitor app information and assignments with Microsoft Intune
• Troubleshoot Win32 app issues