Manually add the Windows 10 Company Portal app by using Microsoft Intune

To manage devices and install apps, your users can install the Company Portal app themselves from the Microsoft Store. If your business needs require that you assign the Company Portal app to them, however, you can manually assign the Windows 10 Company Portal app directly from Intune. You can do so even if you haven’t integrated Intune with the Microsoft Store for Business.

Note

The option described in this article requires that you assign manual updates each time an app update is released.

Configure settings to show offline apps

  1. Sign in to the Microsoft Store for Business with your admin account.
  2. Select the Manage tab near the top of the window.
  3. In the left pane, select Settings.
  4. Under Shopping experience, set Show offline apps to On.
    The offline licensed apps are displayed.

Download the offline Company Portal app

  1. Search for and then select the Company Portal app.

  2. Set the License type to Offline.

  3. Select Get the app to acquire and add the offline Company Portal app to your inventory.

  4. On the Company portal app page, select Manage.

  5. For Platform, select Windows 10 all devices, and then select the appropriate Minimum version, Architecture, and Download app metadata values.

  6. Select Download to save the file to your local machine.

    "Windows 10 all devices" and Architecture X86 package details selected for download

  7. Download all the packages under “Required Frameworks” by selecting Download.
    This action must be completed for x86, x64, and ARM architectures, a total of 12 packages.

  8. Before you upload the Company Portal app to Intune, create a folder (for example: C:\Company Portal) with the packages structured in the following way:

    • Place the Company Portal package into C:\Company Portal. Create a Dependencies subfolder in this location as well.

      Dependencies folder saved with APPXBUN file

    • Place the dependency packages in the Dependencies folder.

      Note

      If the dependencies are not placed in the correct format, Intune cannot recognize and upload the files during the package upload, which causes the upload to fail and display and error.

  9. In Microsoft Intune in the Azure portal, upload the Company Portal app as a new app.

  10. Assign the Company Portal app as a required app to your selected set of target users.

For more information about how Intune handles dependencies for Universal apps, see Deploying an appxbundle with dependencies via Microsoft Intune MDM.

Frequently asked questions

How do I update the Company Portal app on my users’ devices if they have already installed the older apps from the store?

If your users have already installed the Windows 8.1 or Windows Phone 8.1 Company Portal apps from the Microsoft Store, their apps should be automatically updated to the latest version with no action required from you or your users. If the update does not happen, ask your users to confirm that they have enabled auto-updates for Store apps on their devices.

How do I upgrade my sideloaded Windows 8.1 Company Portal app to the Windows 10 Company Portal app?

Our recommended migration path is to delete the assignment for the Windows 8.1 Company Portal app by setting the assignment action to Uninstall. After you select this setting, you can assign the Windows 10 Company Portal app by using any of the previously discussed options.

If you need to sideload the app and you assigned the Windows 8.1 Company Portal without signing it with the Symantec Certificate, complete the upgrade by completing the steps in the preceding sections of this article.

If you need to sideload the app and you signed and assigned the Windows 8.1 Company Portal app with the Symantec code-signing certificate, follow the steps in the next section.

How do I upgrade my signed and sideloaded Windows Phone 8.1 Company Portal app or Windows 8.1 Company Portal app to the Windows 10 Company Portal app?

Our recommended migration path is to delete the existing assignment for the Windows Phone 8.1 Company Portal app or the Windows 8.1 Company Portal app by setting the assignment action to Uninstall. After you select this setting, you can assign the Windows 10 Company Portal app normally.

Otherwise, the Windows 10 Company Portal app must be appropriately updated and signed to ensure that the upgrade path is respected.

If you sign and assign the Windows 10 Company Portal app in this way, you will need to repeat this process for each new app update when it is available in the store. The app is not automatically updated when the store is updated.

Here’s how you sign and assign the app in this way:

  1. Download the Microsoft Intune Windows 10 Company Portal App Signing Script.
    This script requires the Windows SDK for Windows 10 to be installed on the host computer. Download the Windows SDK for Windows 10.
  2. Download the Windows 10 Company Portal app from the Microsoft Store for Business, as discussed previously.
  3. To sign the Windows 10 Company Portal app, run the script with the input parameters detailed in the script header, as shown in the following table.
    Dependencies do not need to be passed into the script. They are required only when the app is being uploaded to the Intune Admin Console.
Parameter Description
InputWin10AppxBundle The path to the source appxbundle file.
OutputWin10AppxBundle The output path for the signed appxbundle file.
Win81Appx The path to the Windows 8.1 or Windows Phone 8.1 Company Portal (.APPX) file.
PfxFilePath The path to the Symantec Enterprise Mobile Code Signing Certificate (.PFX) file.
PfxPassword The password of the Symantec Enterprise Mobile Code Signing Certificate.
PublisherId The Publisher ID of the enterprise. If it is absent, the Subject field of the Symantec Enterprise Mobile Code Signing Certificate is used.
SdkPath The path to the root folder of the Windows SDK for Windows 10. This argument is optional and defaults to ${env:ProgramFiles(x86)}\Windows Kits\10.

When the script has finished running, it outputs the signed version of the Windows 10 Company Portal app. You can then assign the signed version of the app as a line-of-business (LOB) app via Intune, which upgrades the currently assigned versions to this new app.

Next steps