u/pjmarcum

Vendor question here. How are you handling app requests in Intune?

We’ve been building something at PowerStacks and I’m trying to figure out if we’re solving a real problem or just something we’ve convinced ourselves is a problem.

The gap (at least from what we see):

There’s not really a clean way to give users an "app store" experience in Intune without it turning into a bit of a free-for-all.

Company Portal gets you part of the way there, but it doesn’t handle approval workflows.

So, we built something that basically sits in front of Intune:

·       Users can browse and request apps

·       Very robust, highly customizable approval workflows

·       Deployments still happen through Intune

·       Everything runs in your own tenant (App Service, Entra, etc — no SaaS, no agent required)

Before we go much further with it, I’d rather get honest feedback from people who deal with type of thing regularly.

Is this even a real problem in your environment?

If it is:

·       How are you handling it today?

·       What’s the most painful part?

Not trying to sell anything here — just don’t want to build something nobody actually needs.

I figured I’d just throw this out for everyone to think about since it sort of blindsided us….a few weeks ago someone accidentally deleted several thousand active windows devices from AAD. Users were not admins. Only admin account was LAPS managed. This was a major roadblock when recovering the devices! Fortunately our AV product can run scripts on devices so we used that to create a temp local admin account. Without that we would have been in much bigger trouble.