Managing Microsoft Office from the Mac App Store with Workspace ONE UEM
At the WWDC 2018 keynote, Apple announced partnerships with more 3rd-party software developers to bring their apps to the Mac App Store. Notable in that list were Microsoft (Office) and Adobe (Lightroom CC). On January 24th, Microsoft announced the Microsoft Office apps for macOS were published on the Mac App Store. As more macOS applications move to the Mac App Store, understanding how Workspace ONE UEM supports Mac App Store app distribution becomes increasingly important. This post uses Microsoft Office for Mac to demonstrate how Workspace ONE administrators can deploy and maintain Mac App Store apps.
Purchase Office Licenses in Apple Business Manager
The first step in deploying Microsoft Office for macOS is to purchase managed distribution licenses in Apple Business Manager (or Apple School Manager). Administrators should purchase a more-than-adequate number of the free Microsoft Office application licenses. This eliminates the need to constantly make new purchases as an organization grows.
Once you log-in to Apple Business Manager, perform the following steps to purchase licenses:
- Click on Apps and Books.
- Click the filter button to the right of the search bar – choose Type and MacOS.
- Enter Microsoft as the search term.
- Select one of the Microsoft Office applications. For example, Microsoft Word.
- Under Buy Licenses, choose your location token, enter a quantity of licenses, and click Get.
- Confirm the purchase by clicking OK.
- Once the Buy Licenses section resets, the licenses have been purchased.
- Repeat the process and purchase free licenses for the remaining Microsoft Office apps (Microsoft Excel, Microsoft PowerPoint, Microsoft Outlook, Microsoft OneNote, and OneDrive).
Sync Office Licenses to Workspace ONE UEM
With licenses purchased, the next step in the deployment process is to sync the newly purchased licenses into Workspace ONE UEM. While this process happens automatically, on a set schedule, this article shows how to force an immediate sync. This sync causes the new licenses to appear in the Workspace ONE UEM console. From the console, administrators can assign licenses to new/existing devices, keep licenses up-to-date, and reclaim/redistribute licenses after a device wipe.
Perform the following steps once logged-in to the Workspace ONE UEM console:
- Click Apps & Books > Applications > Native.
- Click the Purchased tab.
- Click Filters and select Apple macOS.
- Click Sync Assets, then click OK.
- Click the Refresh button to view the updated list of Volume-Purchased macOS applications (including the Microsoft Office for Mac applications).
Assign Microsoft Office Applications to Devices
Since Workspace ONE is now managing the licenses, administrators can enable those licenses for device-based assignment. This allows Workspace ONE to deliver licensed apps from the Mac App Store without the user needing an Apple ID. Additionally, administrators can elect to deploy the apps on-demand (e.g. user-selected from the catalog) or automatically (as is typical for an organization standard application).
While still logged in to the Workspace ONE UEM console, perform the following steps:
- Click on the application name. For example, Microsoft Word.
- Click Enable Device Assignment and click OK.
- Click Save & Assign.
- Click Add Assignment.
- Click Add Assignment and select the Assignment Group you want to target.
- Change the Allocated number to match the licenses you purchased.
- Set the Deployment Type to Auto or On Demand and click Save.
- Click Save and Publish and then Publish.
Update Microsoft Office for Mac
Workspace ONE periodically checks the Mac App Store and notifies administrators when new application versions are available. This allows administrators to choose when Workspace ONE triggers application updates on managed devices. To reduce administrative burden, Workspace ONE can also automatically perform updates to Mac App Store applications as they become available.
To configure applications for automatic update, perform the following:
- Click Enable Auto Updates.
- Click OK.
- Note the green checkmark in the Auto Update column.
- Workspace ONE UEM automatically requests application updates when an update is available.
If not using automatic updates, the process is slightly different:
- Select an application you’ve enabled for Device Assignment.
- Click Update App.
- Workspace ONE requests devices perform an update to the current version.
In addition to the topics covered above, here are a few additional items for consideration when distributing volume-purchased Mac App Store applications:
- When deploying free volume-purchased Mac App Store applications, consider purchasing more licenses than required. This allows organizations to grow without having to continuously purchase more licenses in Apple Business Manager. This is especially critical for organizations that allow employees to enroll multiple devices (such as bring-your-own, etc).
- The Mac App Store version of Microsoft Office for Mac is not compatible with perpetual licenses/volume licenses. It also will not support users wishing to install the insider preview builds to gain early access to beta features. In these cases, administrators need to deliver the apps using the process outlined in Deploying Third-Party macOS Applications.
- Consider deploying Apple caching services in your network. This reduces bandwidth consumption on an organization’s Internet connection by allowing devices to download App Store content from a local distribution point. For more information, see Content Types That Content Caching Supports in macOS.
- The Mac App Store version of Microsoft Office supports the same set of preferences as the Microsoft CDN version. Use Custom XML to customize the first launch experience for the Office applications.
This post explains managing Microsoft Office for Mac with Workspace ONE:
- VMware can deploy Microsoft Office - from the Mac App Store or as a Native Internal (Non-Store) Applications.
- Deploying Mac App Store apps reduces administrative upkeep, as Workspace ONE UEM can proactively check for updates and deploy them.
- Workspace ONE UEM is built with MDM capabilities at its core.
- Per the WWDC 2018 keynote, administrators should expect more apps in the Mac App Store.
- Focus on Mac App Store as a primary deployment method and leverage Content Caching.
The following links will provide you more detail on deploying applications:
- Deploying Third-Party macOS Applications [VMware]
- VMware Workspace ONE UEM Integration with Apple Business Manager [VMware]
- Custom XML Profiles for Customizing Microsoft Office 2016 for macOS [GitHub]
- Deploy Office for Mac from the Mac App Store [Microsoft]
- Microsoft Office activation and the Mac App Store [Microsoft]
- Microsoft Office and the Mac App Store [Microsoft]
- Content Types That macOS Server Caching and macOS Caching Support [Apple]
- Manage Content Caching on Mac [Apple]