Skip to content

Commit be44d21

Browse files
Merge branch 'main' into docs-editor/review-logs-using-azure-monito-1768508708
2 parents cf3d09b + a7fc83f commit be44d21

22 files changed

Lines changed: 686 additions & 534 deletions

.github/workflows/AutoPublish.yml

Lines changed: 0 additions & 28 deletions
This file was deleted.

autopilot/device-preparation/whats-new.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ Date updated: *September 9, 2025*
4646
4747
[Monthly security update releases](/windows/deployment/update/release-cycle#monthly-security-update-release), also known as Windows quality updates, are installed during a Windows Autopilot device preparation deployment as part of the Windows out-of-box experience (OOBE). The monthly security update releases are installed after the device preparation page completes. These updates can't be disabled for Windows Autopilot device preparation deployments. Installation of monthly security update releases during OOBE normally adds 20-40 minutes to the provisioning process. Installation of monthly security update releases also might require restarts.
4848
49-
More details regarding automatic installation of monthly security update releases can be found in the article [Install Windows monthly security update releases](/intune/intune-service/enrollment/windows-enrollment-status#install-windows-monthly-security-update-releases). However, this article is in regards to using the Enrollment Status Page (ESP) with Windows Autopilot. Windows Autopilot device preparation doesn't use the ESP, so the **Install Windows quality updates (might restart the device)** setting mentioned in this article isn't applicable to Windows Autopilot device preparation.
49+
More details regarding automatic installation of monthly security update releases can be found in the article [Install Windows monthly security update releases](/intune/intune-service/enrollment/windows-enrollment-status#windows-monthly-security-update-release-details). However, this article is in regards to using the Enrollment Status Page (ESP) with Windows Autopilot. Windows Autopilot device preparation doesn't use the ESP, so the **Install Windows quality updates (might restart the device)** setting mentioned in this article isn't applicable to Windows Autopilot device preparation.
5050
5151
For more information, see [Get ready for Windows quality updates out of the box](https://techcommunity.microsoft.com/blog/windows-itpro-blog/get-ready-for-windows-quality-updates-out-of-the-box/4434498).
5252

autopilot/known-issues.md

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Windows Autopilot known issues
33
description: Be informed about known issues that might occur during Windows Autopilot deployment. # RSS subscription is based on this description so don't change. If the description needs to change, update RSS URL in the Tip in the article.
4-
ms.date: 01/13/2026
4+
ms.date: 01/16/2026
55
ms.collection:
66
- M365-modern-desktop
77
- highpri
@@ -34,6 +34,16 @@ This article describes known issues that can often be resolved with configuratio
3434
3535
## Known issues
3636
37+
### Local Autopilot Reset can’t be triggered by local administrator when you deny access from network
38+
39+
**Date added:** January 16, 2026
40+
41+
When a device is configured with an Intune policy that sets **Deny access to this computer from the network** for the local account, the local Windows administrator account can't start a local Windows Autopilot Reset.
42+
43+
This issue affects scenarios where administrators rely on the local administrator account to trigger local Autopilot Reset on a device (for example, from the Windows sign-in screen or after local sign-in). As a workaround, remove the **Deny access to this computer from the network** setting for the local account, or exclude devices that require local Autopilot Reset from this policy. After the device syncs the updated policy, local Autopilot Reset works.
44+
45+
This issue is under investigation.
46+
3747
### Devices don't get quality updates during Microsoft Entra hybrid joined deployments
3848
3949
Date added: *January 13, 2026*

autopilot/tutorial/includes/configure-and-assign-esp.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -70,16 +70,16 @@ When the Enrollment Status Page (ESP) is configured, it has several options that
7070
>
7171
> - This option is only supported for [currently supported versions of Windows 11](/windows/release-health/windows11-release-information).
7272
> - When this option is enabled, monthly security update releases are installed during OOBE after the ESP completes.
73-
> - For important detailed information regarding this option, see [Install Windows quality updates](/intune/intune-service/enrollment/windows-enrollment-status#install-windows-monthly-security-update-releases).
74-
> - If this option is set to **No**, make sure to set the option **Block device use until all apps and profiles are installed** is set to **Yes** to ensure that monthly security update releases aren't installed. For more information, see [Install Windows quality updates](/intune/intune-service/enrollment/windows-enrollment-status#install-windows-monthly-security-update-releases).
73+
> - For important detailed information regarding this option, see [Windows monthly security update release details](/intune/intune-service/enrollment/windows-enrollment-status#windows-monthly-security-update-release-details).
74+
> - If this option is set to **No**, make sure to set the option **Block device use until all apps and profiles are installed** is set to **Yes** to ensure that monthly security update releases aren't installed. For more information, see [Windows monthly security update release details](/intune/intune-service/enrollment/windows-enrollment-status#windows-monthly-security-update-release-details).
7575
7676
- **Block device use until all apps and profiles are installed**:
7777

7878
- **No**: Users can leave the ESP before Intune is finished setting up the device.
7979

8080
> [!IMPORTANT]
8181
>
82-
> Don't set this option to **No** if the option **Install Windows quality updates (might restart the device)** is set to **No**. For more information, see [Install Windows quality updates](/intune/intune-service/enrollment/windows-enrollment-status#install-windows-monthly-security-update-releases).
82+
> Don't set this option to **No** if the option **Install Windows quality updates (might restart the device)** is set to **No**. For more information, see [Windows monthly security update release details](/intune/intune-service/enrollment/windows-enrollment-status#windows-monthly-security-update-release-details).
8383
>
8484
8585
- **Yes**: Users can't leave the ESP until Intune is done setting up the device.
Lines changed: 62 additions & 46 deletions
Original file line numberDiff line numberDiff line change
@@ -1,94 +1,110 @@
11
---
22
title: Add and Assign an App
3-
description: In this article, you'll use Microsoft Intune to add and assign an app.
4-
ms.date: 10/02/2025
3+
description: Learn how to add and assign apps to user groups in Microsoft Intune. Ensure your workforce has access to the apps they need.
4+
ms.date: 01/20/2026
55
ms.topic: how-to
66
ms.reviewer: bryanke
77
ms.collection:
88
- M365-identity-device-management
99
- FocusArea_Apps_Add
1010
---
1111

12-
# Step 8: Add and Assign an App
12+
# Step 8 - Add and assign an app in Microsoft Intune
1313

14-
In this article, you'll use Intune to add and assign an app to your company's workforce. One of an admin's priorities is to ensure that end users have access to the apps they need to do their work.
14+
In this article, you use Intune to add and assign an app to your company's workforce. The goal is to assign apps that users need to do their work. For example, you can assign Microsoft 365 Apps so users can read email, and create and edit documents and spreadsheets.
1515

1616
[!INCLUDE [intune-evaluate](../includes/intune-evaluate.md)]
1717

18-
If you don't have an Intune subscription, [sign up for a free trial account](../fundamentals/free-trial-sign-up.md).
19-
2018
## Prerequisites
2119

22-
- To complete this evaluation step, you must [create a user](../fundamentals/quickstart-create-user.md), [create a group](../fundamentals/quickstart-create-group.md), and [enroll a device](../enrollment/quickstart-setup-auto-enrollment.md).
23-
24-
## Sign in to Intune
25-
26-
Sign in to the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) as the built-in **[Application Manager](../fundamentals/role-based-access-control-reference.md#application-manager)** Intune role.
27-
28-
If you created an Intune Trial subscription, the account that created the subscription is a Microsoft Entra [Global Administrator](/entra/identity/role-based-access-control/permissions-reference#global-administrator).
29-
30-
> [!CAUTION]
31-
> [!INCLUDE [global-admin](../includes/global-admin.md)]
20+
:::row:::
21+
:::column span="1":::
22+
[!INCLUDE [licensing](../../includes/requirements/licensing.md)]
23+
:::column-end:::
24+
:::column span="3":::
25+
> - A Microsoft Intune subscription. [Sign up for a free trial account](../fundamentals/free-trial-sign-up.md).
26+
:::column-end:::
27+
:::row-end:::
28+
29+
:::row:::
30+
:::column span="1":::
31+
[!INCLUDE [rbac](../../includes/requirements/rbac.md)]
32+
:::column-end:::
33+
:::column span="3":::
34+
> Sign in to the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) with the following role:
35+
> - Built-in **[Application Manager](../fundamentals/role-based-access-control-reference.md#application-manager)** Microsoft Intune role
36+
:::column-end:::
37+
:::row-end:::
38+
39+
:::row:::
40+
:::column span="1":::
41+
[!INCLUDE [device-configuration](../../includes/requirements/device-configuration.md)]
42+
:::column-end:::
43+
:::column span="3":::
44+
> To complete this step, you must:
45+
> - [Create a user](../fundamentals/quickstart-create-user.md).
46+
> - [Create a group](../fundamentals/quickstart-create-group.md).
47+
> - [Enroll a device](../enrollment/quickstart-setup-auto-enrollment.md)
48+
:::column-end:::
49+
:::row-end:::
3250

3351
## Add the app to Intune
3452

35-
An app can be included so that Intune can manage aspects of the app.
53+
When you add an app to Intune, you assign that app to the users and groups that need it. You can choose to assign the app to any group you choose, including the group you created in [Step 3 - Create a group](../fundamentals/quickstart-create-group.md).
3654

3755
Use the following steps to add an app to Intune:
3856

39-
1. Sign in to [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431), select **Apps** > **All Apps** > **Create**.
57+
1. Sign in to the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and select **Apps** > **All Apps** > **Create**.
4058
2. In the **App type** drop-down box, select **Windows 10 and later** from **Microsoft 365 Apps**.
4159
3. Click **Select**. The **Add app** steps are displayed.
42-
4. Confirm the default details in the **App suite information** step and click **Next**.
43-
5. Confirm the default settings in the **App settings** step and click **Next**.
44-
6. Select the group assignments for the app. For more information, see [Add groups to organize users and devices](../fundamentals/groups-add.md).
45-
7. Click **Next** to display the **Review + create** page. Review the values and settings you entered for the app.
46-
13. When you're done, click **Create** to add the app to Intune.
47-
48-
## Assign the app to a group
60+
4. Confirm the default details in the **App suite information** step and select **Next**.
61+
5. Confirm the default settings in the **App settings** step and select **Next**.
62+
6. Select the group assignments for the app. You can select the group you created in [Step 3 - Create a group](../fundamentals/quickstart-create-group.md). For more information, see [Add groups to organize users and devices](../fundamentals/groups-add.md).
63+
7. Select **Next** to display the **Review + create** page. Review the values and settings you entered for the app.
64+
8. When you're done, select **Create** to add the app to Intune.
4965

50-
After you've added an app to Microsoft Intune, you can assign the app to additional groups of users or devices.
66+
## Update the app assignment (optional)
5167

52-
> [!NOTE]
53-
> This evaluation step builds on previous evaluation steps in this series. See [prerequisites](quickstart-add-assign-app.md#prerequisites) in this article for details.
68+
After you add an app to Microsoft Intune, you can assign the app to more groups of users or devices at any time.
5469

55-
Use the following steps to assign an app to a group:
70+
Use the following steps to update an app assignment:
5671

57-
1. In [Intune](https://aka.ms/intuneportal), select **Apps** > **All Apps**.
72+
1. Sign in to the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and select **Apps** > **All Apps**.
5873
2. Select the app that you want to assign to a group.
59-
3. Click **Properties**. Next to **Assignments** click **Edit**.
60-
5. Click **Add Group** under the **Required** section. The **Select group** pane is displayed.
61-
6. Find the group that you need to added and click **Select** at the bottom of the pane.
62-
1. Click **Review + save** > **Save** to assign the group.
74+
3. Select **Properties**. Next to **Assignments**, select **Edit**.
75+
4. Select **Add Group** under the **Required** section. The **Select group** pane is displayed.
76+
5. Find the group that you want to add and choose **Select** at the bottom of the pane.
77+
6. Select **Review + save** > **Save** to assign the group.
6378

64-
You now have assigned the app to an additional group.
79+
You now have assigned the app to another group.
6580

6681
## Install the app on the enrolled device
6782

68-
End users must install and use the Company Portal app to install an app made available by Intune. You, acting as an end user, can use the following steps to verify that the app is available to the user of the enrolled device.
83+
End users must install and use the Company Portal app to install an app made available by Intune. You, acting as an end user, can use the following steps to verify that the app is available to the user on Intune-enrolled devices.
6984

70-
1. Sign in to your enrolled Windows Desktop device.
85+
1. Sign in to your enrolled Windows device. You can use the device you enrolled in [Step 5 - Enroll a Windows device in Microsoft Intune](../enrollment/quickstart-enroll-windows-device.md).
7186

7287
> [!IMPORTANT]
73-
> The device must be [enrolled with Intune](../enrollment/quickstart-enroll-windows-device.md). Also, you must sign in to the device using an account contained in the group you assigned to the app.
88+
> - The device must be enrolled in Intune.
89+
> - You must sign in to the device with an account that belongs to the same group you assigned the app to.
7490
7591
2. From the **Start** menu, open the **Microsoft Store**. Then, find the **Company Portal** app and install it.
7692
3. Launch the **Company Portal** app.
77-
4. Click the app that you added using Intune. In this article you added the **Microsoft 365 Apps** suite.
93+
4. Select the app that you added to Intune. In this article, you added the **Microsoft 365 Apps** suite.
7894

7995
> [!NOTE]
80-
> If you did not successfully assign any apps to the Intune user, you'll see the following message:
81-
> *Your IT administrator did not make any apps available to you.*
96+
> If you don't successfully assign any apps to the Intune user, you see the following message:
97+
> `Your IT administrator did not make any apps available to you.`
8298
83-
5. Click **Install**.
99+
5. Select **Install**.
84100

85-
If your business needs require that you assign the Company Portal app to your workforce, you can manually assign the Windows 10 Company Portal app directly from Intune. For more information see, [Manually add the Windows 10 Company Portal app by using Microsoft Intune](company-portal-app.md).
101+
If your business needs require that you assign the Company Portal app to your workforce, you can manually assign the Windows Company Portal app directly from Intune. For more information, see [Manually add the Windows Company Portal app by using Microsoft Intune](company-portal-app.md).
86102

87103
## Next steps
88104

89-
In this article, you added apps to Intune, assigned the apps to a group, and installed the apps on the enrolled Windows Desktop device. For more information about managing apps in Intune, see [What is Microsoft Intune app management?](app-management.md)
105+
In this article, you added apps to Intune, assigned the apps to a group, and installed the apps on the enrolled Windows device. For more information about managing apps in Intune, see [What is Microsoft Intune app management?](app-management.md)
90106

91-
To continue to evaluate Microsoft Intune, go to the next step:
107+
To continue evaluating Microsoft Intune, go to the next step:
92108

93109
> [!div class="nextstepaction"]
94-
> [Step 9: Create and assign an app protection policy](quickstart-create-assign-app-policy.md)
110+
> [Step 9 - Create and assign an app protection policy](quickstart-create-assign-app-policy.md)

0 commit comments

Comments
 (0)