Configuring Collections in Managed Google Play Store - Tips from the field!

-

For the last few days I have been working on Android and iOS device management configuration in Microsoft Intune and as part of it I came across Organize apps feature aka Collections in Managed Google Play. 

So what are Collections? 

Collections are displayed on the front page of the managed Play Store app, allowing easy access to apps of your choice. For example, Organizations can make IT approved essential apps like Microsoft apps for quick access in the managed play store. However, as easy as this may sound, there are some caveats attached to this configuration.

Tips from the field -

1. Creating a collection changes the Play Store layout type which requires that all apps must be added to a collection to be visible. 
2. Deleting collections doesn't automatically revert to the basic layout.
3. Only approved apps can be added to a collection.
4. The managed Play Store app automatically displays a collection if it contains at least one app that's been made available to the user. 
5. Once a collection is created, all existing approved Managed Google Play apps that are not in any other collection will appear in a default My work app collection. 
6. Apps approved after initial collection creation will have no collection assignment and will not be automatically added to the My work app collection.
7. Any app in a collection that hasn't been made available to a user will be automatically hidden in the user's managed Play store app.
8. Apps that are not part of any collection will not appear on the Play Store front page of the end user. However, the end user can still search for them and install in the Play Store.
9. You can create up to 30 collections.
10. You can add up to 100 apps to a collection.

That is a long list, but an important one in my opinion. With that out of the way, we move on to creating a collection.

Creating a collection in Managed Google Play Store


2. Select Apps > All apps > Add.

3. In the Select app type pane, under the available Store app types, select Managed Google Play app.

4. Click Select. The Managed Google Play app store is displayed within Intune.

5. On the left, click Organize apps organize-apps.

6. Click Create a collection.

7. Name the collection and click Next.


8. Use the search bar to find specific apps, select it and click Add apps.


9.  You can arrange the apps as you like. Once you are happy with the layout and list of apps then click Save shown at the bottom.


The final layout should look something like the one below -


On the end user's Android device, the newly created collection will show up in the Managed Google Play store. In my experience, it can take up to 5-7 minutes for it show up.



That's it. Until next time..

Comments

Post a Comment

Popular posts from this blog

How to force escrowing of BitLocker recovery keys using Intune

-
Image
Every now and then it so happens that BitLocker recovery keys do not escrow in AAD. The usual culprits are incorrect BitLocker policies and\or the device hardware configuration failing to meet the minimum requirements. The other scenario and something I recently experienced is when everything is setup right and still the recovery key doesn’t escrow in AAD. As I understand, this can happen if the escrow process got interrupted the first time due to network or local devices related issues and the process could not resume. To circumvent this issue, one can simply push a PowerShell script to the devices to force the escrow of the recovery keys to AAD. Here is a script to do so. try{ $BitlockerVol = Get-BitLockerVolume -MountPoint $env:SystemDrive         $KPID=""         foreach($KP in $BitlockerVol.KeyProtector){             if($KP.KeyProtectorType -eq "RecoveryPassword"){              ...
Read more

Prevent users from running certain programs or applications on Windows endpoints using Intune

-
Image
  When it comes to blocking or preventing users from running an application on Windows devices, one normally uses App locker policy, Windows Defender Application Control and not so new but pretty useful method called Defender Vulnerability management within Microsoft 365 Defender Portal. A recent question on the Tech Community Microsoft forum prompted me to look for all possible alternatives. I started reminiscing over the legacy GPO policies and that is when I stumbled upon the policy  Don’t run specified Windows applications  located under User Administrative Templates - The policy setting does come with its own caveat - " This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from st...
Read more

Intune: Configure Printers for Non-Administrative Users

-
Image
Configuring printers for end users or giving them the ability to do it themselves is a normal requirement for organizations. Now if your users are Administrators, then the configuration can be straight forward, but in case of Non-Administrators there are additional steps required as Non-Administrators will not be able to add a driver in the driver store despite being able to install a printer. In this blog, I will cover the steps that I took to address this requirement using Intune. The setup involves 2 steps -  1. Setup registries. 2. Install the driver and configure the printer Setting up registries – The registries that need to be configured are actually part of a GPO setting – Allow non-administrators to install drivers for these device setup classes It can be found under: Computer Configuration -> Policies -> Administrative Templates -> System -> Driver Installation I used a Powershell script to set the values and wrapped it in a Win32 application. $P...
Read more