Microsoft Intune lets you remotely uninstall applications from managed devices using uninstall assignments. This works for Win32 apps, MSI line-of-business apps, and Microsoft Store apps. For Windows 11 25H2+, the Settings Catalog provides a cleaner method to remove built-in Store apps by removing both the installed app and its provisioned package. This tutorial covers all three methods plus troubleshooting detection rule mismatches.
Before you start
What you will learn
- How to create uninstall assignments for Win32/MSI/LOB apps, remove built-in Store apps via Settings Catalog, and troubleshoot uninstall failures.
- Removing unused or unauthorized applications reduces attack surface, frees disk space, and ensures compliance. Intune uninstall assignments automate this across your managed fleet.
Requirements
- Microsoft Intune admin center (intune.microsoft.com)
- Microsoft 365 tenant with Intune, managed Windows 10/11 devices
- Intune Administrator or Application Manager
Good to know
- 10-15 minutes
Quick answer
Select the app in Intune, add an Uninstall assignment targeting a device or user group. The app is removed silently at the next check-in.
Intune > Apps > All apps > select app > Assignments > Add group > UninstallStep-by-step tutorial
3 stepsCreate an uninstall assignment for Win32/MSI/LOB apps
Create an uninstall assignment for a Win32, MSI, or LOB app.
Intune > Apps > All apps > [App] > AssignmentsIn the Intune admin center, go to Apps > All apps. Select the app you want to remove.
Click Assignments > Add group. Set the assignment type to Uninstall. Select the device or user group to target.
For Win32 apps, Intune runs the uninstall command defined in the app package. For MSI apps, Intune uses msiexec /x with the product code. For LOB apps, Intune runs the configured uninstall command.
Click Save. The uninstall triggers at the next device check-in (typically within 8 hours).
Verify in Intune: Go to Apps > Monitor > App install status. The app should show "Not installed" for targeted devices after sync.
An app can have both Required (install) and Uninstall assignments on different groups. If a device is in both groups, the Uninstall assignment takes precedence. Remove the device from the Required group first to avoid conflicts.
Remove built-in Store apps via Settings Catalog (25H2+)
Remove built-in Microsoft Store apps on Windows 11 25H2+ using Settings Catalog.
Intune > Devices > Configuration > Create > Settings CatalogGo to Devices > Configuration > Create > New Policy > Windows 10 and later > Settings catalog.
Name the policy (e.g. "Remove Built-in Store Apps"). In the settings picker, search for Remove default Microsoft Store packages.
Enable removal for each app you want to remove (e.g. Microsoft News, Solitaire, Xbox, Maps, Groove Music).
Assign the policy to your target device group. The policy applies at the next check-in and removes both the installed app and the provisioned package, preventing reinstallation during Windows updates.
Important: This method only works on Windows 11 25H2 and later. For older versions, use PowerShell scripts deployed via Intune to remove provisioned packages.
This is the cleanest method for built-in Store apps because it removes the provisioned package too. On older Windows versions, Remove-AppxProvisionedPackage via a PowerShell script is needed.
Troubleshoot uninstall failures
Troubleshoot common uninstall failures.
'App not detected' error: The detection rule doesn't match the installed app. Verify file paths, registry keys, or MSI product codes in the app's detection rules. Test on a sample device first.
App reinstalls after uninstall: Check for conflicting Required assignments. If the device is in both a Required and Uninstall group, resolve the conflict. For Store apps, use Settings Catalog to remove the provisioned package.
Win32 app uninstall hangs: Check the uninstall command string in the app package. Test the command locally on a device:
# Check installed Win32 apps
Get-WmiObject Win32_Product | Where-Object {$_.Name -like '*AppName*'}
# Check Intune management logs
Get-ChildItem 'C:\ProgramData\Microsoft\IntuneManagementExtension\Logs'Monitor status: Apps > Monitor > App install status shows per-device install/uninstall status.
Intune Management Extension logs at C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.log contain detailed uninstall execution traces.
Confirm the result
Troubleshooting
App not detected during uninstall
Cause: Detection rule file paths, registry keys, or MSI product codes don't match what's on the device.
Verify detection rules match the exact installation. Test on a sample device. For MSI, use the exact product code from the registry.
App reinstalls after successful uninstall
Cause: Device is in both a Required (install) and Uninstall group, or the Store app has a provisioned package that reinstalls.
Remove the device from the Required group. For Store apps on 25H2+, use Settings Catalog to remove the provisioned package.
Frequently asked questions
How do I uninstall an app via Intune?
Go to Apps > All apps > select the app > Assignments > Add group > set type to Uninstall > select the target group > Save.
Which app types support uninstall assignments?
Win32 apps (.intunewin), MSI line-of-business apps, Microsoft Store apps, and built-in Windows apps (via Settings Catalog on 25H2+).
How do I prevent Store apps from reinstalling?
Use the Settings Catalog on Windows 11 25H2+ to remove both the app and provisioned package. On older versions, deploy a PowerShell script with Remove-AppxProvisionedPackage.
What happens if an app has both install and uninstall assignments?
Uninstall takes precedence over Required if a device is in both groups. Remove the device from the Required group to avoid conflicts.






