Intune app deployment for Microsoft 365 Apps
How to deploy and manage Microsoft 365 Apps (Word, Excel, etc.) through Intune — channels, updates, and policies.
Deploying Microsoft 365 Apps — the installable Word, Excel, PowerPoint, Outlook, OneDrive, and Teams — through Intune is the modern way to manage Office on Windows and Mac. It replaces the older Office Deployment Tool and Configuration Manager patterns for cloud-managed estates.
Adding the app in Intune
In the Intune admin center under Apps → All apps → Add, choose Microsoft 365 Apps (Windows 10 and later) or Microsoft 365 Apps for macOS. Intune presents a configuration form:
- Which apps to include — Word, Excel, PowerPoint, Outlook, OneNote, OneDrive, Teams, Publisher, Access, Skype for Business, Project, Visio.
- Architecture — 32-bit or 64-bit (64-bit is the modern default).
- Update channel — Current, Monthly Enterprise, Semi-Annual Enterprise.
- Removal of other versions — uninstall pre-existing classic Office.
- Language — bundled languages and proofing tools.
- Activation type — shared computer activation (for VDI / multi-user) or standard.
Intune then handles delivery via the Office Configuration Service.
Update channels
Three production channels, each a different cadence:
- Current Channel — features and updates the day they ship. Best for most users, fastest features.
- Monthly Enterprise Channel — features once a month on a predictable day. The right default for many IT teams.
- Semi-Annual Enterprise Channel — feature releases twice a year. For organisations with heavy validation processes.
Pre-production channels (Beta, Current Preview) let you pilot upcoming features with select users.
Office update policy
Even after installation, Office can be governed by an Update for Office profile in Intune. This controls:
- Whether updates are managed by Intune (recommended) or Windows Update.
- Pause / resume update flow.
- Visibility of update notifications to users.
- Bandwidth and timing of background downloads.
App configuration policies
Beyond installation, app configuration policies let you set policies inside Office — disable features, enforce add-in restrictions, set default save locations, configure Outlook profiles, set Teams meeting defaults. These deliver via the cloud policy service and apply on next Office launch.
Mac
Intune supports Microsoft 365 Apps for macOS via .pkg deployment. Channel selection works similarly to Windows. macOS Office is converging fast with Windows Office in features.
Common challenges
- Pre-existing classic Office installations sometimes conflict with the new Intune-deployed version. The configuration option to remove previous versions is essential for clean migrations.
- Shared Computer Activation is required for VDI, Azure Virtual Desktop, or multi-user environments — Office activation lasts a few days rather than per-user.
- OneDrive sync setup is separate from Office app installation — configure Known Folder Move, silent account configuration, and tenant restriction in dedicated profiles.
- Teams in Microsoft 365 Apps installs the new Teams client; classic Teams is deprecated.
For an Intune-managed estate, a single Microsoft 365 Apps profile delivered to all users is the right baseline. Variations by role come through app configuration policies, not separate installs.