Modern LoB App Deployment Simon May Infrastructure Evangelist Microsoft

Modern App Deployment Fundamentals

Module objectives Understand modern app deployment terms types methods requirements lifecycle

Modern App Terms Sideloading Deeplinking microsoftvirtualacademy.com The process of installing a modern app for which you have the appx package files onto a device that supports the installation of appx packages. Deeplinking The process of selecting and recommending through a company app portal apps from the public Windows Store. microsoftvirtualacademy.com

Sideloading: Requirements You have the appx package files The appx package is signed with a trusted code-signing certificate Sideloading is enabled on the target device The target device is licensed for sideloading

1. You must have the appx package files Appx package file for the app Appx package file for the apps dependencies Do not need the PowerShell script or certificate that Visual Studio produces

1. The appx package is signed with a trusted code-signing certificate Certificate must be trusted by the target device Normally the enterprise root CA Could be a certificate chainable to a public root CA Mechanisms exist to enrol an enterprise cert to a non domain joined device

3. Sideloading is enabled on the target device For domain joined devices enable the group policy setting: Computer Configuration\Administrative Templates\Windows Components\App Package Deployment\Allow all trusted apps to install = True For non domain joined devices enable the local group policy setting above or this registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx\AllowAllTrustedApps = 1

4. The target device is licensed for sideloading Windows RT Devices Windows 8 Pro Windows 8 Enterprise Domain Joined N/A Sideloading product key Not Domain Joined

4a. How to add a Sideloading product key First add the key Slmgr /ipk <sideloading product key> Second activate the key slmgr /ato ec67814b-30e6-4a50-bf7b-d55daf729d1e Note: The activation GUID is not the same as the sideloading product key. The activation GUID will always be ec67814b-30e6-4a50-bf7b-d55daf729d1e. Note: This can be scripted!

Sideloading for A User or for All Users Provisioned apps are installed for all users Sideloaded apps are installed per user

Provisioned Apps Maximum 24 Provisioned Apps (including built in, so 10 apps available) Install for every user at first logon Specific to the PC and do not roam with the user Apps can be provisioned before sideloading is enabled or a sideloading product key is added

Ways to Sideload PowerShell – Module 2 System Center Configuration Manager 2012 SP1 – Modules 3, 4, 9, 10, 11 Windows Intune – Modules 5, 6, 9, 10, 11

Deeplinking Any app from the Windows Store can be deep linked You cannot “force” a deep linked app to installed Requires a Microsoft account User is responsible for payment Deeplinking helps you surface useful apps to your users and curate the Windows Store for them

Removing Apps Apps can be removed with PowerShell Apps can be uninstalled by the user Removing an app for one user doesn’t remove it for another* Provisioned apps can be removed *provisioned apps that are removed from the image are removed for the current user and any new users but not other existing users

Updating Apps Sideloading apps must be updated by you Higher version number wins To update provisioned apps, first remove the app Deeplinked apps are updated by the user from the Windows Store

Resources Sideloading Requirements: http://technet.microsoft.com/en-us/library/hh852635.aspx#SideloadingRequirements

4/21/2019 2:44 AM © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.