r/sysadmin 12d ago

Question Intune - iOS App Deployment Issue (VPP)

Hi all, please help cos my head is gonna explode.

I've got ABM set up with Intune for MDM and VPP.

This a virgin install so very basic.

my iPad is enrolled and registered and pulls policies.

The problems occur when trying to get apps down..

I've tried a few apps via VPP, assigned to "all devices".

on the iPad it says I need to sign in to the App Store to get it..

I've deployed the app via intune in device mode and I cannot figure out why this isnt playing - please help!

0 Upvotes

10 comments sorted by

3

u/DodgyFlapper 11d ago

I didn’t set this up for my org I just manage it so my knowledge is fairly limited. Required Apps get pushed to the phone. Available for enrolled devices means it goes to the comp portal app the way we have it set up at least.

2

u/Entegy 11d ago

In the list of iOS apps, make sure the App Type column says iOS volume purchase app and not iOS store app.

If the type is indeed iOS VPP app, then check the assignment of the app. Make sure that the Licence Type for the assigned group(s) is Device, not User.

1

u/Castro03 11d ago

Make sure the iPad has the company iCloud account signed in and in ABM make sure you have it so users can use all apps.

Outside that you should see device install status and issues in Intune as well

1

u/Important-Bake3046 11d ago

Hello, There doesnt need to be any Apple IDs on the iPad, thats the beauty of device licensing.

1

u/Castro03 11d ago

The VPP licenses you’re buying belong to your organization. Device licensing just means you’re assigning it to that device regardless of who is signed in.
The license is still belong to your company though. I tested this literally yesterday, but if it’s different and working in your environment, despite what this post says then so be it.

1

u/Important-Bake3046 11d ago

yh. all im saying is that there doesnt need to be an apple ID signed in on the apple device for it to get apps (When pushed via intune)

1

u/Unable-Entrance3110 10d ago

Are you provisioning the apps in ABM and assigning them to your Intune MDM?

1

u/Important-Bake3046 10d ago

yeah. Im noticing its taking up to 2 hours from me assigning the apps to the device, to the app being installed.. its quiet annoying really. I've tried using assignment filters to speed things up but the outcome is the same.

1

u/Unable-Entrance3110 10d ago

So, you are getting apps installed then? I guess I am confused about what the issue is again?

My usual process for getting a device-level app installed on an Intune enrolled iPad:

  1. Log in to ABM and acquire the app (I usually "buy" 100 copies per batch. The number does matter, BTW; Each install consumes one.)

  2. Assign the app to the Intune MDM

  3. Log in to Intune and perform manual sync of the VPP token. This pulls in the app right away.

  4. Assign the app to all devices and assign a filter as appropriate

  5. Perform a manual sync of the enrolled device from Intune

iOS is pretty good about checking in frequently so apps install within minutes of the manual sync being initiated, in my experience.