Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Medium
A Microsoft 365 Endpoint Administrator needs to deploy a critical Line-of-Business (LOB) application to all corporate-owned Windows 11 devices. The application is packaged as an MSI file. Users should not be able to remove this application, and it must be installed automatically without user intervention. Which assignment type should be used when deploying the LOB app in Intune?
- AAvailable for enrolled devices
- BRequired
- CAvailable with or without enrollment
- DUninstall
Show answer & explanationAnswer & explanation
Correct answer: B. Required
The 'Required' assignment type in Intune ensures that an application is automatically installed on targeted devices without user intervention and that users cannot remove it, aligning with the organizational requirement for a critical LOB app.
Why the other options are wrong
- A. 'Available for enrolled devices' makes the app optional, allowing users to install it from the Company Portal, which doesn't meet the 'automatically installed' and 'cannot remove' requirements.
- C. 'Available with or without enrollment' is for unmanaged devices and doesn't enforce automatic installation or prevent uninstallation on corporate-owned devices.
- D. The 'Uninstall' assignment type is used to remove an application from devices, not to install it.
Intune Required App Assignment
An Intune application assignment type that automatically installs an application on targeted devices and prevents users from uninstalling it via the Company Portal.
- Ensures mandatory deployment of critical applications.
- No user interaction is required for installation.
- Ideal for essential business applications or security tools.
Memory trick: Required means 'you MUST have this, and you CANNOT take it off'.