Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
Redmond desk4 min

How to Update Third-Party Apps with Intune: Choose the Right Windows App Workflow

Intune app updates depend on whether an app comes from the Microsoft Store, Enterprise App Catalog, or a manually packaged Win32 deployment. Choose the matching update workflow and understand assignment, rollout, and rollback limits.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To update a third-party app with Intune, first identify whether it is a Microsoft Store app, an Enterprise App Catalog app, or a manually packaged Win32 app. The update method depends on that app type and its assignment: Enterprise App Catalog auto-update applies only to catalog apps assigned as Required, while other apps follow Store update behavior or an administrator-managed supersedence workflow.

Identify what “Windows Catalog App” means in your tenant

That phrase can refer to different app-management routes in Intune, and they do not share one update process. Check the app’s type and how it is assigned before changing anything:

As an Amazon Associate I earn from qualifying purchases.

  • Microsoft Store app: Store-based deployment, with different update behavior for UWP and Win32 apps.
  • Enterprise App Catalog app: A catalog app managed through Enterprise App Management; it may be set to auto-update or updated through a reviewed supersedence workflow.
  • Manually packaged Win32 app: An administrator uploads an .intunewin package, configures it, and manages later versions through assignments and, if appropriate, supersedence.

Microsoft’s Enterprise App Management documentation describes catalog-app management as available standalone or in the Intune Suite. The cited documentation does not establish current pricing.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Compare the three update routes

Workflow Which apps Who controls an update Assignment and rollout
Store updates Microsoft Store apps Store policy affects UWP updates; Intune manages Store Win32 updates. For Store Win32, Required lets Intune manage the app. With Available, a user must first select Install in Company Portal.
Enterprise App Catalog auto-update Enterprise App Catalog apps only Intune applies a newer catalog version when auto-update is enabled. Requires a Required assignment on Windows 10 or Windows 11; no rollout rings or phased deployment.
Guided update supersedence Catalog apps with an available update An administrator reviews the update and creates a superseding app. Review and set assignments on the replacement app; some settings are not copied.
Manually packaged Win32 supersedence Win32 apps managed in Intune An administrator packages and configures the new version. The superseding app must be explicitly targeted; assignment controls deployment.

Sources: Microsoft’s Store app guidance, Enterprise App Management documentation, guided update supersedence instructions, Win32 supersedence guidance, and Win32 app deployment instructions.

#1 Best Overall

Update Microsoft Store apps

UWP apps

Microsoft says Store apps deployed through Intune are automatically kept current. For UWP apps, that automatic behavior depends on not enabling the policy that turns off automatic downloading and installing of updates. Check whether that policy is enabled if a UWP app is not receiving updates. See Add Microsoft Store apps to Microsoft Intune.

Store Win32 apps

Microsoft’s documentation currently marks Microsoft Store Win32 app availability as preview. Not every app is available or searchable, and publishers host installer content on their own infrastructure. A Required assignment lets Intune manage the app. For an Available assignment, the user must first choose Install in Company Portal; Intune then takes over management and automatic updates. Store Win32 updates are handled by Intune and are not affected by Store update policies. Check the current Microsoft Store app documentation for availability and setup details.

Use Enterprise App Catalog auto-update for Required apps

For a catalog app assigned as Required, enabling auto-update lets Intune check for a newer catalog version and apply it to targeted devices. This avoids creating a new app and supersedence relationship for each version. Microsoft documents this feature for Windows 10 and Windows 11 and for Enterprise App Catalog apps only; an Available assignment retains the existing update workflow. Details are in Microsoft’s Enterprise Application Management documentation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
  • 256 GB SSD of storage.
  • Multitasking is easy with 16GB of RAM
  • Equipped with a blazing fast Core i5 2.00 GHz processor.

This is the hands-off option, but it does not offer rollout rings or staged deployment: the new version goes to all targeted devices at once. Auto-update also does not provide rollback or automatic uninstall remediation. Microsoft’s documentation states, “Auto-update doesn’t support rollout rings or deployment plans for staged update deployment.” If a problem requires remediation, an administrator must take a separate action, such as an Uninstall assignment or a script. See Enterprise App Management.

Review a catalog update before deploying it

If you need an approval point before updating, use guided update supersedence instead of automatic application. Microsoft’s documented flow is to view available updates, select Update, then choose Supersede app to create a new app with the latest package and a supersedence relationship.

  1. Open the catalog app’s available updates in Intune.
  2. Select Update, then Supersede app.
  3. Review the new app’s settings. Some settings, including scope tags and assignments, are not copied.
  4. Set or confirm the replacement app’s assignments before creating it, then manage deployment through that app.

Microsoft’s service-level objectives say most catalog updates are available within 24 hours of vendor release, while updates requiring manual validation are typically available within seven days. These are service objectives, not guarantees for every vendor update. Microsoft documents the workflow and timing in Guided Update Supersedence for Enterprise App Management, updated April 14, 2026.

Rank #3
15.6 Inch Win 11 Laptop Computer, N4020, 4GB DDR4 RAM, 128GB Storage
  • WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
  • 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
  • 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
  • CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
  • LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Update a manually packaged Win32 app with supersedence

For an app that is not being updated through the Store or Enterprise App Catalog, prepare a new .intunewin package, configure its installer commands and detection rules, and assign it. Intune’s Win32 app deployment guide covers adding and assigning the package.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When configuring supersedence, decide whether the new installer updates the installed version itself or whether the old app must be removed first. If the newer installer updates the old version, an uninstall command is not necessary; if the new app replaces the old one, uninstalling the previous version may be necessary. Explicitly target the superseding app: Microsoft says the agent ignores a superseding app without targeting. See Add Win32 app supersedence.

Account for catalog update limits

  • Version display can lag: Enterprise App Catalog data may be cached for up to one hour.
  • Reporting is not a full audit trail: Catalog update reporting reflects the latest state, not a history of earlier versions or actions.
  • Some apps update themselves: Self-updating catalog apps follow the vendor’s process and may require tenant network rules that allow vendor access.
  • Licensing is the customer’s responsibility: Catalog apps may require a vendor license. Intune does not perform a license check.

These limits and requirements are documented in Microsoft’s Enterprise Application Management guidance.

Learn the catalog workflow

Microsoft Learn’s Manage Enterprise App Catalog Applications training module covers deploying catalog apps, monitoring updates, and using supersedence.

Quick Recap

Bestseller No. 1
HP 14' HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
HP 14" HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
$245.99
Bestseller No. 2
Dell Latitude 5420 14' FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
256 GB SSD of storage.; Multitasking is easy with 16GB of RAM; Equipped with a blazing fast Core i5 2.00 GHz processor.
$285.00

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.