Applications deployment considerations

• Applies to:

  ✅ Windows 11 SE, version 22H2 and later

Deploy an application via Microsoft Intune

Validate the application

Create additional policies (optional)

The process to deploy applications to Windows SE devices via Microsoft Intune is the same used for non-SE devices. Applications must be defined in Intune, and then assigned to the correct groups.
However, on Windows SE devices, apps may successfully install, but they need validation to be certain that they're functional.

The following table provides an overview of the applications types that can be deployed to Windows devices via Intune, and considerations about the installation on Windows SE:

Installer/App type	Installer extensions	Available installation methods via Intune	Considerations for Windows 11 SE
Win32	.exe .msi	- Intune Management Extension (IME) - Microsoft Store integration	⚠️ There are known limitations that might prevent an app to install or run.
Universal Windows Platform (UWP)	.appx .appxbundle .msix	- For public apps: Microsoft Store integration - For private apps: line-of-business (LOB) apps	⛔ UWP apps are currently unsupported.
Progressive Web Apps (PWAs)	.msix	- Settings catalog policies - Microsoft Store integration	✅ PWAs are supported.
Web links	n/a	- Windows web links	✅ Web links are supported.

Important

Store apps must be installed in device context. Deploying apps in user context fails with error code 0x800711C7.

Important

Although you'll be able to install apps on Windows 11 SE devices via Intune, some apps may not perform well on these devices due those apps' minimum spec requirements. Before deploying apps, first check which apps will be targeting your Windows 11 SE devices, and ensure that they meet the requirements.

Win32 apps

The addition of Win32 applications to Intune consists of repackaging the apps and defining the commands to silently install them. The process is described in the article Add, assign, and monitor a Win32 app in Microsoft Intune.

Important

If you have Windows 11 SE devices that already have apps deployed through Intune, the apps will not get retroactively tagged with the managed installer mark. The reason is to avoid making any security assumptions for these apps. You may need to redeploy the apps through Intune to get them properly tagged with managed installer and allowed to run.

There are known limitations that might prevent applications to install or execute. For more information, see the next section validate applications.

UWP apps

UWP apps are currently unsupported for Windows 11 SE.

PWA apps

PWAs can be deployed using the Force-installed web Apps option via settings catalog policies, or using the Microsoft Store integration with Intune.

Web links

Web link can be deployed via Intune using Windows web links, and will be available in the Start menu of the targeted devices.

Section review

Before moving on to the next section, ensure that you've completed the following tasks:

• .intunewin package created (for Win32 apps)
• App uploaded via Intune (for Win32 and UWP LOB apps)
• App assigned to the correct groups

Next steps

Advance to the next article to learn how to validate the applications deployed to Windows 11 SE devices.

Next: validate apps >