What’s changed
Microsoft Intune now uses Declarative Device Management (DDM) to deliver required volume purchase program (VPP) apps to Apple devices. Instead of relying solely on the traditional MDM command flow, supported devices receive declarations and handle app installation and state reporting locally, which generally makes deployments more predictable and less chatty.
Supported platforms
DDM handling for required VPP apps applies to devices that meet the following minimum OS levels. Devices below these versions continue to use the existing delivery method.
- iOS/iPadOS 17.2 and later
- macOS 26 and later
Why it matters for admins
DDM shifts more of the enforcement work onto the device itself. The device evaluates the declared state and applies it, then reports status back, rather than waiting for the service to issue each command. For required app deployments this can mean faster installs after enrollment, more reliable enforcement over time, and cleaner status reporting for the apps in scope.
- More consistent enforcement of required VPP app assignments
- Reduced dependency on repeated MDM check-ins to apply changes
- Improved reporting fidelity for app install state
What you should do
No new policy type is required — the change affects how existing required VPP app assignments are delivered to eligible devices. Review your current required VPP assignments, confirm which devices meet the supported OS levels, and validate install and reporting behaviour on a small pilot group before assuming full estate coverage. Keep in mind that a mixed fleet will use both delivery methods until older devices are updated.
Source: Microsoft Learn. Summarised independently — check the source for the latest detail.