Intune discovered apps
Intune discovered apps is a list of detected apps on the Intune enrolled devices in your tenant. It acts as a software inventory for your tenant. Discovered apps is a separate report from the app installation reports. For personal devices, Intune never collects information on applications that are unmanaged. On corporate devices, any app whether it's a managed app or not is collected for this report. Below is the table mapping the expected behavior. In general, the report refreshes every seven days from the time of enrollment (not a weekly refresh for the entire tenant). The only exception to this refresh cycle for the Discovered apps report is application information collected through the Intune Management Extension for Win32 Apps, which is collected every 24 hours.
Monitor discovered apps with Intune
Intune provides an aggregated list of detected apps on the Intune enrolled devices in your tenant.
- Sign in to the Microsoft Intune admin center.
- Select Apps > Monitor > Discovered apps.
Note
You can export the list of discovered apps to a .csv file by selecting Export from the Discovered apps pane.
The Discovered apps report provides the following details:
- Application name
- Platform
- Application version
- Device count
- Application publisher
Intune also provides the list of discovered apps for the individual device in your tenant.
- Sign in to the Microsoft Intune admin center.
- Select Devices > All Devices.
- Select a device.
- To view detected apps for this device, select Discovered Apps in the Monitor section.
Details of discovered apps
The following list provides the app platform type, the apps that are monitored for personal devices, the apps that are monitored for company-owned devices, and the refresh cycle. For more information about app types supported by Intune, see App types in Microsoft Intune.
| Platform | For personally owned devices | For company-owned devices | Refresh cycle |
|---|---|---|---|
| Windows 10/11 (Win32 Apps) NOTE: Requires Intune Management Extension on device | Not Applicable | MSI installed apps on the device that appear in add/remove programs | Every 24 hours from device enrollment |
| Windows 10/11 (Modern Apps) | Only managed modern apps | All modern apps installed on the device | Every seven days from device enrollment |
| Windows 8.1 | Only managed apps | Only managed apps | Every seven days from device enrollment |
| Windows RT | Only managed apps | Only managed apps | Every seven days from device enrollment |
| iOS/iPadOS | Only managed apps | All apps installed on the device except system apps | Every seven days from device enrollment |
| macOS | Only managed apps | All apps installed on the device | Every seven days from device enrollment |
| Android device administrator | Only managed apps | All apps installed on the device | Every seven days from device enrollment |
| Android Enterprise personally owned enrollment | Managed apps in the work profile and system apps | Not applicable | Every seven days from device enrollment |
| Android Enterprise corporate-owned enrollments | Not applicable | Apps installed in the work profile | Every seven days from device enrollment |
| AOSP enrollments | Not applicable | Not yet supported | Not applicable |
Note
- Windows 10/11 co-managed devices, as shown in the client apps workload in Configuration Manager, do not currently collect app inventory through the Intune Management Extension (IME) as per the above schedule. To mitigate this issue, the client apps workload in Configuration Manager should be switched to Intune for the IME to be installed on the device (IME is required for Win32 inventory and PowerShell deployment). Note that any changes or updates on this behavior are announced in in development and/or what's new.
- Personally-owned macOS devices enrolled before November 2019 may continue to show all apps installed on the device until the devices are enrolled again.
- Android Open Source Project (AOSP) enrollments do not display discovered apps.
- On Android Enterprise personally-owned work profile devices, system apps (apps that the Android operating system or device manufacturer consider essential for correct operation of the device) are automatically associated with the work profile, even if not visible to the end user in the "Work" tab, and will be part of the Discovered Apps report. To view the list of system apps that may be reported, go to Settings > Apps > Show system apps on the device. For more information, see Google's Android Enterprise documentation (opens in a new page).
- For customers using a Mobile Threat Defense partner with Intune, App Sync data is sent to Mobile Threat Defense partners at an interval based on device check-in, and should not be confused with the refresh interval for the Discovered Apps report.
The number of discovered apps may not match the app install status count. Possibilities for inconsistencies include:
- A targeting change of an installed managed app can cause the install count in the status pane to decrement, but remain reported in the detected apps.
- Targeting multiple instances of the same app in a tenant will result in different counts due to potential overlap of users or devices. Each instance of the app will count overlapping users, but discovered apps will have duplicated counts.
- Discovered apps and app status are collected at different time intervals, which could cause a discrepancy in the app counts.