Use the ºÚÁϺ£½Ç91Èë¿Ú App Catalog for Windows to install and easily manage popular Windows desktop applications that may not be available through the Microsoft Store. When configured to auto-update, applications managed through the app catalog are kept updated, no manual intervention required, helping to reduce the risks associated with outdated software and potential security vulnerabilities.
The ºÚÁϺ£½Ç91Èë¿Ú App Catalog can help you to:
- Eliminate third-party solutions for app patching by consolidating your app management solutions in ºÚÁϺ£½Ç91Èë¿Ú.
- Automate manual jobs and remove insecure ad hoc app management practices.
- Establish a secure and efficient process for tool resourcing and maintenance.
Prerequisites:
- Devices must run a supported version of Windows (desktop):
- No Windows Home versions are supported.
- See ºÚÁϺ£½Ç91Èë¿Ú Agent Compatibility, System Requirements, and Impacts for the full list of supported Windows versions.
- ºÚÁϺ£½Ç91Èë¿Ú utilizes the following programs to support the App Catalog. If you see these installed on your devices, understand that this is normal and expected:
- WinGet (Windows Package Manager), which is typically installed as part of Windows. ºÚÁϺ£½Ç91Èë¿Ú manages WinGet through the device agent to ensure it is up-to-date.
- winget.exe is installed at C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_[version number]__8wekyb3d8bbwe`
- Microsoft Visual C++.
- WinGet (Windows Package Manager), which is typically installed as part of Windows. ºÚÁϺ£½Ç91Èë¿Ú manages WinGet through the device agent to ensure it is up-to-date.
Considerations:
- ºÚÁϺ£½Ç91Èë¿Ú leverages WinGet to install and update applications on devices. Applications managed through the ºÚÁϺ£½Ç91Èë¿Ú App Catalog will not be patched until a new version becomes available in the WinGet package manifest.
- If a ºÚÁϺ£½Ç91Èë¿Ú app catalog app is installed and takes over a previously installed instance of the same app on a device, some or all of the existing app configurations may be reset.
- It can take up to 30 minutes for device agents to check in for commands to install, update, or remove applications.
Viewing Application Details
From the application list view (DEVICE MANAGEMENT > Software Management), apps managed by the App Catalog are noted in the Application Type column. You can quickly see information like the current version of the application installed and the timestamp of the last update.
Click a row to view the application details, see bound device groups and devices, and check the status of the application on bound devices:
- Application Details:
- Type – Origin of the Application. Applications that originate from the app catalog are noted as App Catalog. This is also how they appear in the software list view.
- Version – The version of the application installed.
- Version Last Updated – Date and time that the application was updated from the WinGet manifest within ºÚÁϺ£½Ç91Èë¿Ú.
- Supported Devices - OSes supported for this application.
- Patch Settings: Review configured update settings and command line arguments here. If making changes, remember to click Save.
Installing an Application from the App Catalog
To install an app from the ºÚÁϺ£½Ç91Èë¿Ú App Catalog:
- Log in to the .
- Go to DEVICE MANAGEMENT > Software Management.
- From the Windows tab, click Add New and select ºÚÁϺ£½Ç91Èë¿Ú App Catalog. Follow the wizard to configure the application:
Select Application
Select an application to install and manage.
- On the Select Application screen, select an application from the list, then click Next. Only one application can be selected at a time.
- The table below shows the latest available applications and their respective package IDs.
ºÚÁϺ£½Ç91Èë¿Ú App Catalog Applications for Windows
Applications available in the app catalog with their respective package IDs. Use the package IDs to find information from the vendor about the command line arguments supported for the application.
Name | Package ID |
---|---|
1Password | AgileBits.1Password |
Adobe Acrobat Reader DC | Adobe.Acrobat.Reader.64-bit |
Chrome | Google.Chrome |
Firefox | Mozilla.Firefox |
GoogleDrive | Google.GoogleDrive |
OneDrive | Microsoft.OneDrive |
OpenVPN | OvenVPNTechnologies.OpenVPN |
Slack | SlackTechnologies.Slack |
Webex | Cisco.Webex |
Zoom | Zoom.Zoom |
Configurations
Configure the Patching and Configuration details. These details are optional.
- (Optional) Select Auto-Update to keep the application patched to the latest available version. This is enabled by default.
- ºÚÁϺ£½Ç91Èë¿Ú leverages WinGet aka Windows Package Manager for the latest version. Apps will not be patched until a new version is available in the WinGet package manifest.
When the version of the application in the WinGet package manifest is lower than what the end user has installed on their device, no action is taken. When the latest version in the manifest is greater than the version currently installed, we will send the update command to the device agent.
- (Optional) Enter any desired command line arguments to configure the application. Reference the individual vendor’s documentation to understand which arguments are available.
- Some applications have required command line arguments that are pre-populated in this field by ºÚÁϺ£½Ç91Èë¿Ú. They are noted here:
- Webex:
ACCEPT_EULA=TRUE ALLUSERS=1
- OpenVPN: OpenVPN will prompt for configuration files if not present. See OpenVPN’s documentation on .
- Webex:
- Some applications have required command line arguments that are pre-populated in this field by ºÚÁϺ£½Ç91Èë¿Ú. They are noted here:
- Click Next.
Associations
Select the device groups and devices where you want to install the application.
- Select the Device Groups tab. Select one or more device groups where you will install this application. For device groups with multiple OS member types, the application is installed only on Windows devices.
- Select the Devices tab. Select one or more devices where you will install this application.
- Click Next.
- Verify the details on the summary screen are correct before proceeding, then click Save.
An install command is sent to targeted devices. The user on the device will receive prompts that a software update is available.
End User Notifications
When a command is sent to the device agent to install or update an application, the end user is prompted with an update notification on their device:
Users can click Update Now on the individual notification to install the update immediately, or Snooze the notification for 24 hours. This notification will be sent every day for 7 days before the update is forced on their system.
Deleting an Application
If you no longer want to manage an app through ºÚÁϺ£½Ç91Èë¿Ú, you can remove it. Removing an app managed by the ºÚÁϺ£½Ç91Èë¿Ú App Catalog does not remove the app from devices where the app is bound; the app will no longer be managed by ºÚÁϺ£½Ç91Èë¿Ú.
To remove an App Catalog app from a bound device:
- Log in to the .
- Go to DEVICE MANAGEMENT > Software Management.
- Select the Windows tab and select the app you want to delete from a device.
- From the Devices or Device Groups tab, unselect the devices or device groups where you no longer want to manage the app and click Save.
- On the Manage software associations prompt, read through the implications and click the checkbox to acknowledge the following:
- You will unbind the software from the selected devices.
- This will not uninstall the software from the devices.
- The software will no longer be managed by ºÚÁϺ£½Ç91Èë¿Ú on the devices.
- Click Unbind to proceed.
To delete an App Catalog app:
- Log in to the .
- Go to DEVICE MANAGEMENT > Software Management.
- Select the Windows tab and select the app you want to delete. Apps installed from the App Catalog are noted in the Application Type column.
- At the top right of the page, click delete.
- Click delete again to proceed.
Viewing Command Statuses
When you create, update, or remove an app from a bound device, the ºÚÁϺ£½Ç91Èë¿Ú Agent reports the status on each bound device:
To check the status of an install, patch, or removal command:
- Log in to the .
- Go to DEVICE MANAGEMENT > Software Management.
- Under the Command Status column, click View Status to see status information for the relevant application:
- Device Name - Name of the device where the app is bound.
- Status – Install Success, Install Failed, or Update Pending.
- Timestamp – Date and time when the status was reported by the device agent.
- Click View to the right of the relevant device row.
- The results log of the command is displayed, including status details, code, and timestamp.
ºÚÁϺ£½Ç91Èë¿Ú reports the following statuses for the Windows App Catalog:
Status | Description |
INSTALL SUCCESS | App was successfully installed. |
INSTALL PENDING | App is queued for installation. |
INSTALL FAILED | App was not successfully installed. |
UPDATE SUCCESS | App was updated to the latest WinGet version successfully. |
UPDATE PENDING | App is queued for updates. |
UPDATE FAILED | App was not successfully updated. |
Additional Resources
Enroll: