将应用添加到 Microsoft IntuneAdd apps to Microsoft Intune

在配置、分配、保护或监视应用之前,必须将它们添加到 Microsoft Intune。Before you can configure, assign, protect, or monitor apps, you must add them to Microsoft Intune.

公司的应用和设备用户(即公司员工)可能具有多个应用要求。The users of apps and devices at your company (your company's workforce) might have several app requirements. 你可能会发现评估和了解若干应用基础知识是有帮助的,然后再将应用添加到 Intune 并向员工提供。Before adding apps to Intune and making them available to your workforce, you may find it helpful to assess and understand a few app fundamentals. Intune 提供多种类型的应用。There are various types of apps that are available for Intune. 必须确定公司用户所需的应用需求,例如你的员工所需的平台和功能。You must determine app requirements that are needed by the users at your company, such as the platforms and capabilities that your workforce needs. 必须确定是要使用 Intune 管理设备(包括应用),还是要使用 Intune 管理应用(不包括设备)。You must determine whether to use Intune to manage the devices (including apps) or have Intune manage the apps without managing the devices. 此外,必须确定员工所需的应用和功能,以及需要这些应用和功能的具体人员。Also, you must determine the apps and capabilities that your workforce needs, and who needs them. 本文的信息可帮助你开始使用。The information in this article helps you get started.

Microsoft Intune 中的应用类型App types in Microsoft Intune

Intune 支持多种不同的应用类型。Intune supports a wide range of app types. 为每种应用类型提供的可用选项有所不同。The available options differ for each app type. Intune 支持添加并分配以下类型的应用:Intune lets you add and assign the following app types:

应用类型App types 安装Installation 更新Updates
应用商店中的应用(应用商店应用)Apps from the store (store apps) Intune 在设备上安装应用。Intune installs the app on the device. 应用是自动更新的。App updates are automatic.
内部编写的应用(业务线)Apps written in-house (line-of-business) Intune 在设备上安装应用(需要提供安装文件)。Intune installs the app on the device (you supply the installation file). 必须更新应用。You must update the app.
内置的应用(内置应用)Apps that are built-in (built-in apps) Intune 在设备上安装应用。Intune installs the app on the device. 应用是自动更新的。App updates are automatic.
Web 上的应用(Web 链接)Apps on the web (web link) Intune 在设备主屏幕上创建一个到 Web 应用的快捷方式。Intune creates a shortcut to the web app on the device home screen. 应用是自动更新的。App updates are automatic.
其他 Microsoft 服务中的应用Apps from other Microsoft services Intune 在公司门户中创建应用的快捷方式。Intune creates a shortcut to the app in the Company Portal. 有关详细信息,请参阅应用源设置选项For more information, see App source setting options. 应用是自动更新的。App updates are automatic.

特定应用类型详细信息Specific app type details

下表列出了特定应用类型,以及如何在 Intune 的“添加应用”窗格中添加它们:The following table lists the specific app types and how you can add them in the Intune Add app pane:

特定于应用的类型App-specific type 常规类型General type 特定于应用的过程App-specific procedures
Android 应用商店应用Android store apps 应用商店应用Store app 选择“Android”作为“应用类型”,然后输入应用的 Google Play 应用商店 URL 。Select Android as the app type, and enter the Google Play store URL for the app.
Android Enterprise 应用Android Enterprise apps 应用商店应用Store app 选择“Android”作为“应用类型”,然后输入应用的托管 Google Play 应用商店 URL 。Select Android as the app type, and enter the Managed Google Play store URL for the app. 11
iOS/iPadOS 应用商店应用iOS/iPadOS store apps 应用商店应用Store app 选择“iOS”作为“应用类型”,搜索应用,然后在 Intune 内选择该应用 。Select iOS as the app type, search for the app, and select the app in Intune.
Microsoft 应用商店应用Microsoft store apps 应用商店应用Store app 选择“Windows”作为“应用类型”,然后输入应用的 Microsoft 应用商店 URL 。Select Windows as the app type, and enter the Microsoft store URL for the app.
托管的 Google Play 应用Managed Google Play apps 应用商店应用Store app 选择“托管 Google Play”作为“应用类型”,搜索应用,再在 Intune 中选择应用。Select Managed Google Play as the app type, search for the app, and select the app in Intune.
适用于 Windows 10 的 Microsoft 365 应用Microsoft 365 apps for Windows 10 Store 应用 (Microsoft 365)Store app (Microsoft 365) 在“Microsoft 365 应用版”下选择“Windows 10”作为“应用类型”,然后选择要安装的 Microsoft 365 应用 。Select Windows 10 under Microsoft 365 Apps as the app type, and then select the Microsoft 365 app that you want to install.
适用于 MacOS 的 Microsoft 365 应用Microsoft 365 apps for macOS Store 应用 (Microsoft 365)Store app (Microsoft 365) 在“Microsoft 365 应用版”下选择“macOS”作为“应用类型”,然后选择 Microsoft 365 应用套件 。Select macOS under Microsoft 365 Apps as the app type, and then select the Microsoft 365 app suite.
适用于 Windows 10 的 Microsoft Edge 77 及更高版本Microsoft Edge, version 77 and later for Windows 10 应用商店应用Store app 在 Microsoft Edge 版本 77 及更高版本下选择“Windows 10”作为“应用类型” 。Select Windows 10 under Microsoft Edge, version 77 and later as the app type.
适用于 macOS 的 Microsoft Edge 版本 77 及更高版本Microsoft Edge, version 77 and later for macOS 应用商店应用Store app 在 Microsoft Edge 版本 77 及更高版本下选择“macOS”作为“应用类型” 。Select macOS under Microsoft Edge, version 77 and later as the app type.
Android 业务线 (LOB) 应用Android line-of-business (LOB) apps LOB 应用LOB app 选择“业务线应用”作为“应用类型”,选择“应用包文件”,然后输入扩展名为 .apk 的 Android 安装文件。Select Line-of-business app as the app type, select the App package file, and then enter an Android installation file with the extension .apk.
iOS/iPadOS LOB 应用iOS/iPadOS LOB apps LOB 应用LOB app 选择“业务线应用”作为“应用类型”,选择“应用包文件”,然后输入扩展名为 .ipa 的 iOS/iPadOS 安装文件 。Select Line-of-business app as the app type, select the App package file, and then enter an iOS/iPadOS installation file with the extension .ipa.
Windows LOB 应用Windows LOB apps LOB 应用LOB app 选择“业务线”应用作为应用类型,选择“应用包文件”,然后输入扩展名为 .msi、.appx、.appxbundle、.msix 和 .msixbundle 的 Windows 安装文件 。Select Line-of-business app as the app type, select the App package file, and then enter a Windows installation file with the extension .msi, .appx, .appxbundle, .msix, and .msixbundle.
内置 iOS/iPadOS 应用Built-in iOS/iPadOS app 内置应用Built-in app 选择“内置应用”作为“应用类型”,然后从提供的应用列表中选择内置应用 。Select Built-In app as the app type, and then select the built-in app in the list of provided apps.
内置的 Android 应用Built-in Android app 内置应用Built-in app 选择“内置应用”作为“应用类型”,然后从提供的应用列表中选择内置应用 。Select Built-In app as the app type, and then select the built-in app in the list of provided apps.
Web 应用Web apps Web 应用Web app 选择“Web 链接”作为应用类型,然后输入指向该 Web 应用的有效 URL 。Select Web link as the app type, and then enter a valid URL pointing to the web app.
Android 企业系统应用Android Enterprise system apps 应用商店应用Store app 选择“Android Enterprise 系统应用”作为“应用类型”,然后输入应用名称、发布者和包文件 。Select Android Enterprise system app as the app type, and then enter the app name, publisher, and package file.
Windows 应用 (Win32)Windows app (Win32) LOB 应用LOB app 选择“Windows 应用 (Win32)”作为“应用类型”,选择“应用包文件”,然后选择扩展名为 .intunewin 的安装文件 。Select Windows app (Win32) as the app type, select the App package file, and then select an installation file with the extension .intunewin.
macOS LOB 应用macOS LOB apps LOB 应用LOB app 选择“业务线”作为“应用类型”,选择“应用包文件”,然后选择扩展名为 .intunemac 的安装文件 。Select Line-of-business as the app type, select the App package file, and then select an installation file with the extension .intunemac.

1 有关 Android Enterprise 和 Android 工作配置文件的详细信息,请参阅下面的了解许可的应用1 For more information about Android Enterprise and Android work profiles, see Understanding licensed apps below.

可以在 Microsoft Intune 中添加应用,方法是通过选择“应用” > “所有应用” > “添加” 。You can add an app in Microsoft Intune by selecting Apps > All apps > Add. 将显示“选择应用类型”窗格,可选择“应用类型” 。The Select app type pane is displayed and allows you to select the App type.

提示

LOB 应用是从应用安装文件添加的应用。An LOB app is one that you add from an app installation file. 例如,若要安装 iOS/iPadOS LOB 应用,可以通过在“选择应用类型”窗格中选择“业务线应用”作为“应用类型”来添加应用程序 。For example, to install an iOS/iPadOS LOB app, you add the application by selecting Line-of-business app as the App type in the Select app type pane. 然后,选择应用包文件(扩展名为 .ipa)。You then select the app package file (extension .ipa). 这些应用类型通常为内部编写。These types of apps are typically written in-house.

评估应用要求Assess app requirements

作为 IT 管理员,不仅可以确定你的组必须要使用的应用,而且可以确定每个组和子组所需的功能。As an IT Admin, you determine not only which apps your group must use, but you also determine the capabilities needed for each group and subgroup. 对于每个应用,应确定所需平台、需要应用的用户组、要为这些组应用的配置策略和要应用的保护策略。For each app, you determine the platforms needed, the groups of users that need the app, the configuration policies to apply for those groups, and the protection policies to apply.

此外,还必须确定是否要将重点放在移动设备管理 (MDM) 上或者仅放在移动应用程序管理 (MAM) 上。Additionally, you must determine whether to focus on Mobile Device Management (MDM) or only on Mobile Application Management (MAM).

使用 Intune 以通过 MDM 管理设备在以下情况下非常有用:Using Intune to manage the device with MDM is useful when:

  • 用户需要 Wi-Fi 或 VPN 企业连接配置文件以实现高效工作。Users need a Wi-Fi or a VPN corporate connectivity profile to be productive.
  • 用户需要一组应用推送到他们的设备。Users need a set of apps to be pushed to their device.
  • 组织需要符合强调特定 MDM 控制(例如安全性或加密)的法规或其他策略。Your organization needs to comply with regulatory or other policies that call out specific MDM controls, such as security or encryption.

当不管理设备时,使用 Intune 以通过 MAM 管理应用在以下情况下非常有用:Using Intune to manage apps with MAM without managing the device is useful when:

  • 需要使用户能够使用他们自己的设备 (BYOD)。You want to allow users to use their own device (BYOD).
  • 需要提供一次性弹出消息,让用户了解 MAM 保护已就绪,而不是提供持续的设备级通知。You want to provide a one-time pop-up message to let users know that MAM protections are in place, rather than continual device-level notification.
  • 需要符合一些策略的要求,这些策略对个人设备需要较少的管理功能。You want to comply with policies that require less management capability on personal devices. 例如,需要管理应用的公司数据,而不是管理整个设备的公司数据。For instance, you want to manage the corporate data for the apps, rather than manage the corporate data for the entire device.

有关详细信息,请参阅比较 MDM 和 MAMFor more information, Compare MDM and MAM.

确定谁将使用应用Determine who will use the app

在确定员工需要哪些应用时,请考虑各种用户组以及他们使用的各种应用。As you're determining which apps your workforce needs, consider the various groups of users and the various apps they use. 在添加应用之后,了解这些组也很有用。Knowing these groups is also helpful after you've added an app. 添加应用后,可以分配一组能够使用此应用的用户。After you add an app, you assign a group of users that can use the app.

首先,必须根据应用所包含数据的敏感性确定应该有权访问应用的组。First, you must determine which group should have access to the app, based on the sensitivity of the data the app contains. 可能需要包括或排除组织中某些类型的角色。You might need to include or exclude certain types of roles within your organization. 例如,销售组可能仅需要某些 LOB 应用,而侧重于工程、财务、人力资源或法律的人员可能不需要使用 LOB 应用。For example, only certain LOB apps might be required for your sales group, whereas people focused on engineering, finance, HR, or legal might not need to use the LOB apps. 此外,销售组人员的移动设备上可能需要额外的数据保护以及对内部公司服务的访问权。In addition, your sales group might need additional data protection and access to internal corporate services on their mobile devices. 必须确定此组将如何使用应用连接到资源。You must determine how this group will connect to resources using the app. 应用访问的数据将保留在云中还是本地?Will the data that the app accesses live in the cloud or on-premises? 同时,用户将如何使用应用连接到资源?Also, how will the users connect to resources by using the app?

Intune 还支持对需要安全访问本地数据的客户端应用(例如业务线应用服务器)启用访问权限。Intune also supports enabling access to client apps that require secure access to on-premises data, such as line-of-business app servers. 提供此类型的访问通常需要将用于访问控制的 Intune 托管证书与外围中的标准 VPN 网关或代理(例如 Azure Active Directory 应用程序代理)结合使用。You ordinarily provide this type of access by using Intune-managed certificates for access control, combined with a standard VPN gateway or proxy in the perimeter, such as Azure Active Directory Application Proxy. 可以借助 Intune 的 App Wrapping Tool 和应用 SDK 将已访问的数据包含在业务线应用中,这样它就不能将公司数据传递给使用者应用或服务。The Intune App Wrapping Tool and App SDK can help contain the accessed data within your line-of-business app, so that it can't pass corporate data to consumer apps or services.

使用 Intune 部署规划、设计和实施指南帮助确定如何标识与每个用例和子用例方案相关联的组织组。Use the Intune deployment planning, design and implementation guide to help determine how you identify the organizational groups that are associated with each use-case and sub-use-case app scenario. 有关将应用分配到组的信息,请参阅使用 Microsoft Intune 将应用分配到组For information about assigning apps to groups, see Assign apps to groups with Microsoft Intune.

为解决方案确定应用的类型Determine the type of app for your solution

可从以下应用类型中进行选择:You can choose from the following app types:

  • 应用商店中的应用:上传到 Microsoft Store、iOS/iPadOS 应用商店或 Android 应用商店的应用是应用商店应用。Apps from the store: Apps that have been uploaded to either the Microsoft store, the iOS/iPadOS store, or the Android store are store apps. 应用商店应用的提供者对应用进行维护并提供更新。The provider of a store app maintains and provides updates to the app. 在应用商店列表选择应用,并使用 Intune 将其添加为用户的可用应用。You select the app in the store list and add it by using Intune as an available app for your users.
  • 内部编写的应用(业务线) :内部创建的应用是业务线 (LOB) 应用。Apps written in-house (line-of-business): Apps that are created in-house are line-of-business (LOB) apps. 已经为支持 Intune 的平台(例如 Windows、iOS/iPadOS、macOS 或 Android)之一创建此应用类型的功能。The functionality of this type of app has been created for one of the Intune supported platforms, such as Windows, iOS/iPadOS, macOS, or Android. 组织创建更新并将这些更新作为单独的文件提供给你。Your organization creates and provides you with updates as a separate file. 可以通过使用 Intune 添加和部署更新为用户提供应用更新。You provide updates of the app to users by adding and deploying the updates using Intune.
  • Web 上的应用:Web 应用是客户端-服务器应用程序。Apps on the web: Web apps are client-server applications. 服务器提供 Web 应用,其中包括 UI、内容和功能。The server provides the web app, which includes the UI, content, and functionality. 此外,新式 Web 托管平台通常会提供安全性、负载均衡和其他优势。Additionally, modern web hosting platforms commonly offer security, load balancing, and other benefits. 此应用类型是在 Web 上单独进行维护的。This type of app is separately maintained on the web. 可以使用 Intune 指向此应用类型。You use Intune to point to this app type. 还可以指定哪组用户可以访问此应用。You also assign which groups of users can access the app. 请注意,Android 不支持 Web 应用。Note that Android does not support web apps.
  • 其他 Microsoft 服务中的应用:源自 Azure AD 或 Office Online 的应用。Apps from other Microsoft services: Apps that have been sourced from either Azure AD or Office Online. Azure AD 企业应用程序通过 Azure 门户进行注册和分配。Azure AD Enterprise applications are registered and assigned via the Azure portal. Office Online 应用程序使用 M365 管理中心提供的授权控制进行分配。Office Online applications are assigned using the licensing controls available in the M365 Admin Center. 可以在公司门户中向最终用户隐藏或显示 Azure AD 企业应用程序和 Office Online 应用程序。You can hide or show Azure AD Enterprise and Office Online applications to end-users in the Company Portal. Microsoft Endpoint Manager 管理中心,选择“租户管理” > “自定义”,查找此配置设置 。From the Microsoft Endpoint Manager admin center, select Tenant administration > Customization to find this configuration setting. 选择在公司门户中向最终用户隐藏或显示 Azure AD 企业应用程序或 Office Online 应用程序 。Select to Hide or Show either Azure AD Enterprise applications or Office Online applications in the Company Portal for each end-user. 每位最终用户将从所选的 Microsoft 服务中看到其整个应用程序目录。Each end-user will see their entire application catalog from the chosen Microsoft service. 默认情况下,每个附加的应用源会设置为“隐藏”。By default, each additional app source will be set to Hide. 有关详细信息,请参阅应用源设置选项For more information, see App source setting options.

确定组织需要的应用时,请考虑这些应用如何与云服务集成,应用访问什么数据,应用是否对 BYOD 用户可用以及应用是否需要 Internet 访问。As you're determining which apps your organization needs, consider how the apps integrate with cloud services, what data the apps access, whether the apps are available to BYOD users, and whether the apps require internet access.

有关组织需要的应用类型的详细信息,请参阅创建设计的“功能要求”部分中的“应用”部分。For more information about the types of apps that your organization needs, see "Apps" section within the "Feature requirements" section of Create a design.

了解应用管理和保护策略Understanding app management and protection policies

通过 Intune 可以修改所部署应用程序的功能,帮助这些应用符合公司的符合性和安全性策略。Intune lets you modify the functionality of apps that you deploy to help align them with your company's compliance and security policies. 此操作使你可以确定如何保护公司数据。This control allows you to determine how your company data is protected. Intune 托管应用是通过一组丰富的移动应用程序保护策略启用的,例如:Intune-managed apps are enabled with a rich set of mobile application protection policies, such as:

  • 限制“复制和粘贴”和“另存为”功能。Restricting copy-and-paste and save-as functions.
  • 将 Web 链接配置为在 Microsoft Edge 应用内打开。Configuring web links to open inside the Microsoft Edge app.
  • 启用多标识使用和应用级条件访问。Enabling multi-identity use and app-level Conditional Access.

Intune 托管应用还可以启用应用保护,而无需注册,使你能够在不管理用户设备的情况下即可应用数据丢失防护策略。Intune-managed apps can also enable app protection without requiring enrollment, which gives you the choice of applying data loss-prevention policies without managing the user's device. 此外,还可以使用 Intune App SDK 和应用包装工具在移动和业务线应用中进行移动应用管理。Additionally, you can incorporate mobile-app management in your mobile and line-of-business apps by using the Intune App SDK and App Wrapping Tool. 有关这些工具的详细信息,请参阅 Intune App SDK 概述For more information about these tools, see Intune App SDK overview.

了解获得许可的应用Understanding licensed apps

除了了解 Web 应用、应用商店应用和 LOB 应用,还应注意批量采购计划的应用和获得许可的应用的目标,例如:In addition to understanding web apps, store apps, and LOB apps, you should also be aware of the destination of volume-purchase-program apps and licensed apps, such as:

  • 适用于企业的 Apple 批量采购计划 (iOS) :iOS/iPadOS App Store 允许为想要在公司运行的应用购买多个许可证。Apple Volume Purchasing Program for Business (iOS): The iOS/iPadOS App Store lets you purchase multiple licenses for an app that you want to run in your company. 购买多个副本可帮助你有效地管理公司的应用。Purchasing multiple copies helps you to efficiently manage apps in your company. 有关详细信息,请参阅管理批量购买的 iOS/iPadOS 应用For more information, see Manage iOiOS/iPadOSS volume-purchased apps.

  • Android 工作配置文件:可采用与将应用分配到标准 Android 设备不同的方式,将应用分配到 Android 工作配置文件设备。Android work profile: How you assign apps to Android work profile devices differs from how you assign them to standard Android devices. 为 Android 工作配置文件安装的所有应用都来自托管 Google Play 商店。All apps you install for Android work profiles come from the Managed Google Play store. 使用 Intune 搜索并批准所需的应用。You use Intune to browse for the apps you want and approve them. 然后,该应用会显示在 Azure 门户的“许可的应用”节点中,可以像管理任何其他应用一样管理应用的分配。The app then appears in the Licensed apps node of the Azure portal, and you can manage assignment of the app as you would any other app.

  • 适用于企业的 Microsoft Store (Windows 10) :可在适用于企业的 Microsoft Store 中为组织查找和购买应用(单个或批量)。Microsoft Store for Business (Windows 10): Microsoft Store for Business gives you a place to find and purchase apps for your organization, individually or in volume. 通过将此应用商店与 Microsoft Intune 相连,可以在 Azure 门户中管理批量购买的应用。By connecting the store to Microsoft Intune, you can manage volume-purchased apps in the Azure portal. 有关详细信息,请参阅管理来自适用于企业的 Microsoft Store 的应用For more information, see Manage apps from Microsoft Store for Business.

    备注

    Windows 应用的文件扩展名包括 .msi、.appx、.appxbundle、.msix 和 .msixbundle 。The file extensions for Windows apps include .msi, .appx, .appxbundle, .msix and .msixbundle.

添加应用之前Before you add apps

在开始添加和分配应用之前,请考虑以下几点:Before you begin to add and assign apps, consider the following points:

  • 如果要从应用商店添加和分配应用,用户必须具有该应用商店的帐户才能安装应用。When you add and assign an app from a store, your users must have an account with that store to be able to install the app.
  • 某些分配的应用或项目可能依赖于内置的 iOS/iPadOS 应用。Some apps or items that you assign might depend on built-in iOS/iPadOS apps. 例如,如果要在 iOS/iPadOS 应用商店分配一本书,则设备上必须存在 iBooks 应用。For example, if you assign a book in the iOS/iPadOS store, the iBooks app must be present on the device. 如果已经删除了 iBooks 内置应用,则无法使用 Intune 将其恢复。If you have removed the iBooks built-in app, you cannot use Intune to reinstate it.

重要

如果在部署并安装应用后通过 Intune Azure 门户更改应用的名称,则将无法再使用命令来定位应用。If you change the name of the app through the Intune azure portal after you have deployed and installed the app, the app will no longer be able to be targeted using commands.

云存储空间Cloud storage space

使用软件安装程序安装类型(例如,业务线应用)创建的所有应用都必须打包并上载到 Intune 云存储中。All apps that you create by using the software installer installation type (for example, a line-of-business app) are packaged and uploaded to Intune cloud storage. Intune 的试用订阅包括 2 GB 的云存储空间,用于存储托管应用和更新。A trial subscription of Intune includes 2 gigabytes (GB) of cloud-based storage that is used to store managed apps and updates. 完整订阅不会限制存储空间总量。A full subscription does not limit the total amount of storage space.

云存储空间的要求如下:Requirements for cloud storage space are as follows:

  • 所有应用安装文件都必须位于同一文件夹内。All app installation files must be in the same folder.

  • 上传的任意文件的文件大小不得超过 8 GB。The maximum file size for any file that you upload is 8 GB.

    备注

    Windows 业务线 (LOB) 应用(包括 Win32、Windows Universal AppX、Windows Universal AppX 捆绑包、Windows Universal MSI X 和 Windows Universal MSI X 捆绑包)的每个应用的最大大小限制为 8 GB。Windows Line-of-business (LOB) apps, including Win32, Windows Universal AppX, Windows Universal AppX bundle, Windows Universal MSI X, and Windows Universal MSI X bundle, have a maximum size limit of 8 GB per app. 所有其他 LOB 应用(包括 iOS/iPadOS LOB 应用)的每个应用的最大大小限制为 2 GB。All other LOB apps, including iOS/iPadOS LOB apps, have a maximum size limit of 2 GB per app.

创建和编辑应用类别Create and edit categories for apps

应用类别可用于对应用进行排序,让用户在公司门户中更容易查找应用。App categories can be used to help you sort apps to make them easier for users to find in the company portal. 可以向应用分配一个或多个类别(例如,“开发者应用”或“通信应用”)。You can assign one or more categories to an app, for example, Developer apps or Communication apps.

向 Intune 添加应用时,可以视需要选择所需的类别。When you add an app to Intune, you are given the option to select the category you want. 请参阅平台专属主题,了解如何添加应用并分配类别。Use the platform-specific topics to add an app and assign categories. 若要创建和编辑你自己的类别,请按以下过程操作:To create and edit your own categories, use the following procedure:

  1. 登录到 Microsoft 终结点管理器管理中心Sign in to the Microsoft Endpoint Manager admin center.
  2. 选择“应用” > “应用类别”。Select Apps > App categories.
    “应用类别”窗格显示当前类别的列表。The App categories pane displays a list of current categories.
  3. 执行以下任一操作:Do either of the following:
    • 若要添加一个类别,在“创建类别”窗格中选择“添加”,然后输入类别的名称。To add a category, in the Create category pane, select Add, and then enter a name for the category.
      只能使用一种语言输入名称,并且 Intune 不会进行翻译。Names can be entered in one language only, and they are not translated by Intune.
    • 若要编辑类别,请选择类别旁边的省略号 (...),然后选择“固定到仪表板”或“删除”。To edit a category, select the ellipsis (...) next to the category, and then select Pin to dashboard or Delete.
  4. 选择“创建”。Select Create.

Intune 自动添加的应用Apps that are added automatically by Intune

之前,Intune 包含了一些可供快速分配的内置应用。Previously, Intune contained a number of built-in apps that you could quickly assign. 根据 Intune 客户反馈,我们删除了此列表,并且不再显示内置应用。Based on Intune customer feedback, we removed this list, and the built-in apps are no longer displayed. 但是,如果你已分配任何内置应用,则在应用列表中仍会看到这些应用。However, if you have already assigned any built-in apps, the apps remain visible in the list of apps. 可以根据需要继续分配这些应用。You can continue to assign the apps as required.

备注

对于安装所需的非业务线应用,假定未检测到应用且应用的安装状态不是“安装挂起”,则 Intune 将尝试通过在每次设备签入时发送安装命令来安装该应用。For the installation of a required non-Line-of-Business app, Intune will attempt to install the app by sending an install command whenever the device checks-in, given that the app is not detected and the app's install state is not Install Pending.

安装、更新或删除所需应用Installing, updating, or removing required apps

Intune 将在 24 小时内自动重新安装、更新或删除所需应用,而不必等待 7 天的重新评估周期。Intune will automatically reinstall, update, or remove a required app within 24 hours, rather than waiting for the 7 day re-evaluation cycle.

Intune 会根据以下条件自动重新安装、更新或删除所需应用:Intune will automatically reinstall, update, or remove a required app based on the following conditions:

  • 如果最终用户卸载你要求安装在其设备上的应用,则在该时间计划过去时 Intune 将自动重新安装该应用。If an end user uninstalls an app that you have required to be installed on the end user's device, Intune will automatically reinstall the app when this schedule elapses.
  • 如果必需的应用安装失败或设备上不存在该应用,Intune 将评估符合性并在此时间计划过后重新安装该应用。If a required app install fails or somehow the app is not present on the device, Intune evaluates compliance and reinstalls the app when this schedule elapses.
  • 管理员将应用定位为可供用户组使用且最终用户可从设备上的公司门户安装的应用。An admin targets an app as available to a user group and an end user installs the app from the company portal on the device. 之后,管理员会将应用从 v1 更新到 v2。Later, the admin updates the app from v1 to v2. Intune 会在此时间计划过去时更新应用,前提是应用的任何早期版本仍然在设备上。Intune will update the app when this schedule elapses, provided that any previous version of the app is still present on the device.
  • 如果管理员部署卸载意向并且该设备上存在此应用且卸载失败,Intune 会评估符合性,并在该时间计划过去时卸载该应用。If the admin deploys uninstall intent and the app is present on the device and failed to uninstall, Intune evaluates compliance and uninstalls the app when this schedule elapses.

卸载应用Uninstall an app

如果需要从用户的设备卸载应用,请使用以下步骤。When you need to uninstall an app from user's devices, use the following steps.

  1. 登录到 Microsoft 终结点管理器管理中心Sign in to the Microsoft Endpoint Manager admin center.
  2. 选择“应用” > “所有应用” > “应用” > “分配” > “添加组” 。Select Apps > All apps > the app > Assignments > Add group.
  3. 在“添加组”窗格中,选择“卸载”。In the Add group pane, select Uninstall.
  4. 选择“包括的组”,以选择受此应用分配影响的用户组。Select Included Groups to select the groups of users that are affected by this app assignment.
  5. 选择要对其应用卸载分配的组。Select the groups that you want to apply the uninstall assignment.
  6. 在“选择组”窗格中单击“选择”。 Click Select on the Select groups pane.
  7. 在“分配”窗格中单击“确定”以设置分配。 Click OK on the Assign pane to set the assignment.
  8. 如果想排除受此应用分配影响的任何用户组,请选择“排除组”。If you want to exclude any groups of users from being affected by this app assignment, select Exclude Groups.
  9. 如果已选择排除任何组,请在“选择组”中选择“选择” 。If you have chosen to exclude any groups, in Select groups, select Select.
  10. 在“添加组”窗格中选择“确定”。 Select OK in the Add group pane.
  11. 在应用的“分配”窗格中选择“保存”。 Select Save in the app Assignments pane.

重要

为成功卸载应用,请务必先删除成员或组的安装分配,然后再将其分配到待卸载。To uninstall the app successfully, make sure to remove the members or group assignment for install before assigning them to be uninstalled. 如果将一个组同时分配为安装应用和卸载应用,将保留而不会删除该应用。If a group is assigned to both install an app and uninstall an app, the app will remain and not be removed.

应用安装错误App installation errors

有关 Intune 应用安装错误的详细信息,请参阅应用安装错误For details about Intune app installation errors, see App installation errors.

后续步骤Next steps

若要了解如何将每个平台的应用添加到 Intune,请参阅:To learn how to add apps for each platform to Intune, see: