Private app repository in Windows 11

Applies to:

  • Windows 11

Starting in Windows 11, administrators have new options to deploy apps to devices. The Microsoft Store will continue to allow users to install public and retail apps.

The Company Portal app is the private app repository for organizations and enterprises. It supports more app types and scenarios.

When the Company Portal app is installed, users open it, and see the apps your organization makes available. Users select an app, and install it.

This article discusses the Company Portal app installation options, adding organization apps, and more.

Before you begin

The Company Portal app is included with Microsoft Endpoint Manager (MEM). Endpoint Manager is a Mobile Device Management (MDM) and Mobile Application manager (MAM) provider. It help manages your devices, and manage apps on your devices.

If you're not managing your devices using an MDM provider, the following resources may help you get started:

Prerequisites

To use the Company Portal app:

Install the Company Portal app

To install the Company Portal app, you have some options:

  • Use Microsoft Endpoint Manager: Endpoint Manager includes Microsoft Intune (cloud) and Configuration Manager (on-premises). With both services, you can add Microsoft Store apps, like the Company Portal app. Once added, you create an app policy that deploys and installs the Company Portal app to your devices.

    • This option is preferred, and is the most scalable, especially if you have many devices. When you create the app policy, the policy can be deployed to many users and many devices simultaneously. Admins can also use reporting to make sure the app is installed on organization-managed devices.

    • On co-managed devices, which are managed by Microsoft Intune + Configuration Manager together, the Company Portal app shows your Intune apps and your Configuration Manager apps. So, all apps are shown in one place.

    • When the Company Portal app is installed from the Microsoft Store app, by default, it's automatically updated. Users can also open the Microsoft Store app, go to the Library, and check for updates.

    For more information, see:

  • Use Windows Autopilot: Windows Autopilot automatically provisions devices, registers them in your Azure AD organization (tenant), and gets them ready for production. If you're purchasing new devices, then we recommend using Windows Autopilot to preconfigure the devices, and get them ready for use.

    • In the Endpoint Manager admin center, you add the Company Portal app from the Microsoft Store. Once it's added, the app can be included in your Windows Autopilot deployment. When the device turns on and is getting ready, the Company Portal app is also installed, before users sign in.

    • When the Company Portal app is installed from the Microsoft Store app, by default, it's automatically updated. Users can also open the Microsoft Store app, go to the Library, and check for updates.

    For more information, see:

  • Use the Microsoft Store: The Company Portal app is available in the Microsoft Store, and can be downloaded by your users. Users open the Microsoft Store app on their device, search for Company Portal, and install it. When it's installed, users might be prompted to sign in with their organization account (user@contoso.com). When the app opens, they see a list of approved organization apps that can be installed.

    • This option requires users to install the Company Portal app themselves. If you have many users, the recommended approach is to deploy the Company Portal app using Endpoint Manager or using Windows Autopilot.

    • When the Company Portal app is installed from the Microsoft Store app, by default, it's automatically updated. Users can also open the Microsoft Store, go to the Library, and check for updates. Within the Company Portal app, they can use the update feature to get app fixes and feature updates on the organization apps you added.

Customize the Company Portal app

Many organizations customize the Company Portal app to include their specific information. In the Endpoint Manager admin center, you can customize the Company Portal app. For example, you can add a brand logo, include support information, add self-service device actions, and more.

For more information, see Configure the Intune Company Portal app.

Add your organization apps to the Company Portal app

When you add an app in the Endpoint Manager admin center, there's a Show this as a featured app in the Company Portal setting. Be sure you use this setting.

On co-managed devices (Microsoft Intune + Configuration Manager together), your Configuration Manager apps can also be shown in the Company Portal app. For more information, see Use the Company Portal app on co-managed devices.

When the apps are shown, users can select and download the apps on their devices. You can add Microsoft Store apps, web apps, Microsoft 365 apps, LOB apps, Win32 apps, and sideload apps. For more information on adding apps to the Endpoint Manager admin center, see:

If you use a third party or partner MDM provider, be sure to configure the settings that list your apps in the Company Portal app.

Windows Package Manager

If your organization creates its own apps, your app developers can use Windows Package Manager to deploy apps. For more information on Endpoint Manager and Windows Package Manager, see Evolving the Microsoft Store for Business and Education.