In this latest addition to the Keep it Simple with Intune series, I’m showing you how you can remove those pesky default apps from your Windows 10 deployed device. I’m using the Microsoft Store for Business to achieve this and synching the applications to my Intune tenant before uninstalling them. Let’s see how this is done.
In the Store for Business portal
Log into the Store for Business at https://businessstore.microsoft.com and search for the application you would like to remove. I’ve gone for the Windows Camera app. Click on the application.
Now click Get the app to purchase and acquire the licence.
Back at the app screen click the three dots … and choose Manage.
You need to make the app available to the private store, so choose Private store availability and then make available to Everyone.
You’ll see the application is now listed in the Store for Business under your tenant name.
In the Azure Portal
In the Azure Portal, navigate to Microsoft Intune\Client apps\Microsoft Store for Business. Click the Sync button to sync your private apps into Intune.
Once synced the application will appear in your list of apps. Click on the application.
As stated, you need to assign the application to at least one group. Click the Properties link.
Now click the Edit link next to Assignments.
Scroll down to the Uninstall section and select a group which will be targeted, ideally for this exercise choose Add all devices. I’ve been more granular in my demo. Click Review + save.
When happy with the configuration, click Save to confirm.
On the endpoints
After the devices have synced with Intune, you’ll see the app removed from the endpoints. Here the Camera app has been removed.
Be sure to take a look at the other blog posts in the series:
- #1 Enable password reset for users
- #2 Push out your customised Start Menu
- #3 Disk Encryption
- #4 Deploying a Win32 app
- #5 Intune session from Charlotte Systems Management User Group
- #6 Configure OneDrive and KFR
- #7 Deploying the Edge Browser
- #8 Introduction to Device Restrictions
- #9 Manually enrolling a Windows 10 device into Intune
- #10 Applying App Protection
- #11 Deploying a PowerShell script
- #12 Deploying Microsoft Edge Stable via the MEM Admin Center
- #13 Uninstalling Microsoft Edge Beta
- #14 Enabling Credential Guard on your endpoints
- #15 Managing Windows Updates
- #16 Intune session from West Michigan Systems Management User Group
This is a great tip (and a really helpful series for a first time Intune admin).
For anyone struggling to make this work on Intune managed kiosk devices, unfortunately this will only work if the Microsoft Store for Business licence type is set to offline, as there’s no user assigned to the device for it to check the assignment against -Microsoft says: Autologon uses a local user account with no Azure Active Directory (AD) credentials. So, online licenses can’t be evaluated.
That’s really handy information Phill. Thanks for taking time to comment. Glad you like the series. Cheers Paul