'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix Intune iOS User Enrollment and VPP App Deployment Issues
Question details
Volume-purchased apps fail to deploy to iOS devices enrolled through Microsoft Intune user enrollment and user groups.
- Product
- Microsoft Intune
- Device & OS
- iOS
- Scenario
- Deploying Apple VPP applications to user-enrolled iOS devices via Microsoft Intune admin center.
- Observed behavior
- Volume-purchased apps do not install or appear on the target iOS devices despite being assigned to specific user groups.
Ensure you have administrative access to the Microsoft Endpoint Manager admin center and verify that your Apple VPP token is currently active and successfully syncing with Intune.
Verify App Licensing Type and Group Assignments
Check whether the VPP apps are configured for device-based or user-based licensing, and ensure they are assigned to the correct user groups.
Apple's User Enrollment relies heavily on Managed Apple IDs. Because these devices are not fully managed (supervised), VPP apps must typically use user-based licensing rather than device-based licensing.
Log in to the Microsoft Intune admin center. Navigate to 'Apps' > 'iOS/iPadOS apps', select the VPP app that is failing to deploy, and check its licensing configuration. Ensure it is set to user-based licensing.
In the app's Properties pane, click on the 'Assignments' section. Confirm that the application is targeted at valid 'User Groups' rather than 'Device Groups', as User Enrollment ties the app to the user's Managed Apple ID.
Review the official Microsoft VPP app guidance at learn.microsoft.com to ensure all prerequisites for iOS User Enrollment are strictly met.
If licensing and assignments are correct but the issue persists, post your specific scenario in the Microsoft Intune Application Management forum on Microsoft Q&A.
Equip Your Managed Devices with WPS Office
While configuring app deployments in Microsoft Intune, consider adding WPS Office to your corporate iOS catalog. It is a highly compatible, lightweight, and free alternative to Microsoft Office, perfect for managed mobile devices.
Frequently Asked Questions
Can I use device-based licensing for Intune iOS User Enrollment?
No. Apple's User Enrollment relies on Managed Apple IDs for BYOD (Bring Your Own Device) scenarios. Device-based licensing is intended for Automated Device Enrollment (fully supervised devices), while User Enrollment requires user-based licensing for VPP apps.
Why is my Apple VPP token not syncing with Microsoft Intune?
Token sync failures typically occur if the Apple VPP token has expired, the Apple ID password was changed, or if Apple Business Manager updated its terms and conditions that need to be accepted. Check 'Tenant Administration' > 'Connectors and tokens' in Intune to view the token status.
Do VPP apps install silently on user-enrolled iOS devices?
Unlike supervised corporate devices where apps can be pushed silently without prompts, iOS User Enrollment usually requires the user to accept the installation prompt for managed applications on their personal device.
