Microsoft are positioning the Company Portal app as a cross-platform portal for Microsoft Endpoint Manager. This will dramatically improve the user experience on co-managed devices.

It surprised me that there’s no easy way to install Company Portal on a device automatically.

Windows Store apps can only be made available in Intune. We have to ask the user to install Company Portal manually.

This is horrible.

alt text

A quick search confirms this and that the preferred method is to integrate Intune with Microsoft Store for Business (MSfB)

MSfB requires a Global Admin to do the initial setup. Depending on your organisation this could be challenging to action depending on your procedures and team structure. Intune Administrators do not have the permissions to perform the initial set up of MSfB.

Stuck in limbo

In a January 2020 article Mary Jo Foley had this to say about MSfB

Microsoft is continuing to try to clean up its digital app-store mess. Its latest planned move, according to my contacts: Get rid of the Microsoft Store for Business and Microsoft Store for Education.

Greg Shields (author of the excellent Pluralsight Intune courses) lays this out better than I can

The officially supported options are either

  • use MSfB, a technology with an uncertain future, that needs Global Admin rights to set up
  • manually download the package for offline use and deploy as a Line-of-business app
  • ask the user to install Company Portal manually

There is another way, thanks to the work of Oliver Kieselbach.

Using Powershell to auto-install Company Portal

Oliver Kieselbach has a great blog post detailing how to use the StoreInstallMethod of the MDM Bridge WMI provider to change Windows Language settings.

I have adapted this slightly to install Company Portal instead. All the code that does the main work is by Oliver, so all credit for this method belongs to him.

As noted in the comments this can be adapted to automatically install any store app by changing the application ID. For example, the iTunes URL is

https://www.microsoft.com/en-gb/p/itunes/9pb2mz1zmb1s

so to adapt this code to auto install iTunes, you’d change the applicationID line to read

$applicationID = "9pb2mz1zmb1s"

This method works, and we use it in production. But I am not sure this is supported, so check before you deploy.

It seems crazy that we need workarounds to deploy such a key part of the modern desktop experience.

Intune allows us to deploy Microsoft 365 Apps (Office 365) and Edge Chromium automatically from the endpoint portal with little trouble. Hopefully this method to deploy store apps will not be required in some future Intune update.