# How to enforce app installation on Windows devices

Most organizations require their workforce to install a number of essential applications on their devices. Hexnode UEM simplifies this process by remotely enforcing such apps to the devices by setting them as required.

Defining required apps helps ensure that all the necessary applications remain installed silently on the devices. If a required app is missing on the device, the Hexnode UEM portal identifies it on the next [scheduled device scan](https://www.hexnode.com/mobile-device-management/help/mdm-settings/#scheduled-device-scan) and marks the device as [non-compliant](https://www.hexnode.com/mobile-device-management/help/how-to-configure-compliance-settings-in-hexnode-mdm/). Resultantly, the portal will also reinitiate the app installation. You can easily deploy store and enterprise (MSI) apps on your Windows devices using the Required Apps policy.

 Notes:- The *Required Apps* policy is supported on **Windows 10** and **Windows 11** devices.
- To deploy enterprise apps via Required Apps, you must initially [add the app to the Hexnode app inventory](https://www.hexnode.com/mobile-device-management/help/distribute-enterprise-apps-msi-to-windows-10-devices/#add-enterprise-apps-to-hexnode-app-inventory).

 

Add Required apps to Windows devices via policy
-----------------------------------------------

To install apps silently using the Required Apps policy:

1. Login to your Hexnode UEM portal > Navigate to the **Policies** tab > Click on **New Policy** to create a new one or click on any policy to edit an existing one > Enter the *Policy Name* and *Description* in the provided fields.
2. Go to **Windows** > From *App Management*, choose **Required Apps** > Click on **Configure**.
3. Click on the **+Add** button > choose either the **Add App** or [Add Group](https://www.hexnode.com/mobile-device-management/help/how-to-configure-app-groups-using-hexnode-mdm/#configure-an-app-group) option.
4. On choosing *Add App*, search and select the required apps from **Local Apps**. Select **Public Store** to install apps directly from the public app store. Search and select the required apps.
    OrOn selecting *Add Group*,
    search and select the required app groups.
5. When selecting the required app(s) or app group(s), click **Configure** under **Custom Installation** to set up **Configuration Settings** such as installation settings, uninstallation settings, or custom scripts for enterprise apps.
     Notes:
    - Uninstallation settings are only available for **MSIX/EXE** apps.
    - Only Windows 11 support MSI app installation on devices without the Hexnode agent app.
6. Click **Save** to apply the settings.
7. Click **Done**.
8. Next, associate the policy with target devices by navigating to the **Policy Targets** tab.
9. Select the required **Devices**/**Device Groups**/**Users**/**User Groups**/**Domains** to which the policy is to be associated.
10. Click on **Save**.

An MSI app can have multiple versions added to the Hexnode app inventory. When included in an app group, admins can configure which version to use from within the app group. Any changes in the version of an MSI app in the app group updates it in the associated **Required Apps** policy and on the device.

Installation Criteria for App Types with Multiple Versions
----------------------------------------------------------

Hexnode UEM allows adding multiple versions of an app, both store and enterprise, to the app inventory. If multiple versions of an app are added to the Required Apps policy, only one version of the app will be deployed for installation on the devices. The priority of installation for different app versions depends on various cases that are explained below:

1. If the enterprise app version is the same or higher than that of its store app version, the enterprise app version gets pushed to the devices.
2. In case, if the store app version is higher than the enterprise app version, the store app version will be pushed to the devices.