Instiq
Chapter 4 · Manage and secure applications·v1.0.0·Updated 6/29/2026·~14 min

What's changed: Created MD-102 Chapter 4 (domain: Manage and secure applications). Deploy/update apps (Win32 app .intunewin/LOB app/Microsoft Store app, Microsoft 365 Apps, Office Deployment Tool, Microsoft 365 Apps admin center, Apple VPP/Google Play, Quiet Time policies, deployment status monitoring and installation failures) and app protection/configuration policies (app protection policies MAM in-app data protection for managed/unmanaged BYOD, require app protection via Conditional Access, app configuration policies).

4.1Deploy and update apps

Key points

Understand Win32/LOB/Microsoft Store apps, Microsoft 365 Apps and the Office Deployment Tool, Apple VPP and Google Play, Quiet Time policies, and monitoring/troubleshooting installation failures.

Prepare/deploy apps by format. Intune centralizes distribution and monitoring.

4.1.1App types and deployment

Win32 apps are classic desktop apps packaged as .intunewin for deployment; line-of-business (LOB) apps are in-house apps; Microsoft Store apps are store-delivered. Deploy Microsoft 365 Apps (Office) via Intune, or configure with the Office Deployment Tool (ODT). Manage Office policies also in the Microsoft 365 Apps admin center. License/deploy store apps via Apple Volume Purchase Program (VPP) or Google Play. Distinguish ".intunewin classic" = Win32 app from "store-delivered" = Store app.

4.1.2Quiet time and monitoring

Quiet Time policies suppress notifications for Android/iOS apps during set hours (e.g., off-hours). Monitor deployment status in Intune and investigate installation failures to isolate causes (dependencies, detection rules, requirements).

Continue reading — free sign-up

You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.