Windows 8 Modern Apps Sideloading

Windows 8 Modern Apps Deployment
Prepared By
Kaushal Pandey
kaushap@microsoft.com
Manoj Kumar Pal

Manoj.Pal@microsoft.com
2Microsoft 2
Table of Contents
1.0 Introduction................................................................................................................1
2.0 Preparing and Deploying Windows 8 Side loading..............................................2
Page ii
Prepared by Kaushal Pandey And Manoj Kumar Pal
2Microsoft 2
1.0 Introduction
1.1 Purpose
The purpose of this document is to describe the Windows 8 Side Loading Procedure.
1.2 What is windows 8 Side loading
You can add your business apps to a Windows image and customize the Start screen to include them.
You can customize the Start screen for Windows 8 Enterprise, Windows Server 2012, or a domain-joined
PC running Windows 8 Pro.
Line-of-business (LOB) Windows Store apps do not have to be certified or installed through the Windows
Store. Adding apps that do not come from the Windows Store is called sideloading. Side loaded apps
must be signed with a certificate that is chained to a trusted root certificate
1.3 Windows 8 Side loading Requirements
You can side load LOB Windows Store apps on devices running Windows RT and on devices running
Windows Server 2012, Windows 8 Enterprise, or Windows 8 Pro. You can't side load LOB Windows Store
apps on any other editions of Windows in your enterprise. However, you can use a developer license to
add apps that are in development to other editions of Windows.
Before you can add side loaded LOB apps to a Windows image: You must enable the Allow all trusted
applications to install Group Policy setting.
Before you can run side loaded LOB apps: You must activate the sideloading product key on a device
running Windows 8 Enterprise or Windows 8 Pro. You must activate the sideloading product key on a
device running Windows RT.
-OR-
You must join the device running Windows 8 Enterprise or Windows Server 2012 to an Active Directory
domain that has the Allow all trusted applications to install Group Policy setting enabled.
You can enable sideloading on Windows 8 Enterprise or Windows Server 2012 just by joining the device
to a domain. To enable sideloading on a Windows 8 Enterprise device that is not domain-joined, you
must use a sideloading product activation key.
Note: - To enable sideloading on Windows® 8 Pro device, you must use a sideloading product
activation key.
Page 1
Prepared by Kaushal Pandey and Manoj Kumar Pal
2Microsoft 2
2.0 Preparing and Deploying Windows 8 Side loading
For the Windows 8 Modern Application Deployment for in this document :
1. Creating the Group Policy for enabling the side loading

2. Side loading the Modern Application in Windows 8 Manually using Power Shell
3. Deploying the app via the Windows image using Microsoft Deployment toolkit 2012 Update 1
2.1 Creating the Group Policy for enabling the side loading
This step demonstrates how to configure the windows 8 for enabling the side loading. The step includes
the modification to local computer policies.
Note: - The approach below specifies the steps for enabling the Side loading group policy on the local
windows 8 computer. However the group policy can be configured on the Domain level to apply the
GPO to bulk of the computer.
This GPO eventually modifies the registry value AllowAllTrustedApps to 1.
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx\AllowAllTrustedApps = 1
On Windows 8 Machine,
From the start screen
type Edit Group Policy and
click to Settings and then
select the Edit Group
Policy setting from the
search results.
Page 2
2Microsoft 2
Under Local Computer

Policy in the left pane,
click to expand Computer
Configuration,
Administrative
Templates, Windows
Components, and then
App Package
Deployment.
Double-click the Allow all

trusted apps to install
setting.
In the Allow all trusted

apps to install window,
click Enabled and then
click OK.
Click Apply and OK
2.2 Side loading the Modern Application in Windows 8 Manually using Power
Shell
Page 3
2Microsoft 2
The Step demonstrates how side load the Windows 8 Modern application using the PowerShell
command lets. This step in the document is the foundation step for the users to get along with the
windows 8 Apps side loading. In the next few sections we would be using the windows 8 App side
loading using the DISM and Microsoft Deployment toolkit 2012 update 1.
Importing the Certificate to Trusted root Certification Authorities.
For the demo purpose we

would be using the Modern
app Hello world for the side
loading.
The demo apps attached as

below
Ensure the Windows 8

machine meets the side
loading requirements as called
out in the previous section.
Verify the Group policy is set

up to allow the Side loading
after navigating to the edit
Local Policy-> Local Computer
Policy -> Computer
Configuration -> Administrative
Templates -> Windows
Components -> Application
Package Deployment -> Allow
all Trusted apps to install -
>Enabled as configured in the
previous section .
Page 4
2Microsoft 2
After verifying the side loading

is enabled. Next we need to
deploy the certificate for the
apps. In order to import the
certificate , On Windows 8
Start Screen Type Certificate
and then click settings and
choose the Manage the
computer Certificate
Navigate to Certificate- Local

Computer - > Trusted Root
Certification Authorities ->
Certificates -> Right Click -> All
Task -> Import
Under the Certificate Import

Wizard choose the default
(Local Machine) Click Next
Page 5
2Microsoft 2
Navigate to the Certificate file

shipped with the Hello World
apps .
Click Next
Under certificate store make

the Certificate store should be
Trusted Root Certification
Authorities is chosen.
Click Next
Under the completing the

certificate import wizard verify
the input supplied on the
previous pages and click finish
Page 6
2Microsoft 2
Once the import would be

successful you would see the
prompt confirming the import
was successful
Verify the Newly imported

certificate is visible under the
Certificates-Local Computer- >
Trusted Root Certification
Authorities -> Certificate
The entire step of the

certification addition can be
done by using the certmgr.exe
when we would be deploying
the apps during the run time
we would be using the
Certmgr.exe to import the
certificate to Trusted Root
Certification Authorities .
Side loading using windows power Shell Command Lets

On the Windows 8 Start
Screen Type the windows
Power Shell .
Right Click windows

PowerShell and Select the
Page 7
2Microsoft 2
“Run as Administrator “
Accept the UAC Prompt.

Click Yes
Under the Windows Power

shell Command type the
command Add-
AppXPackage “Location of
the Appx file”
Enter
Page 8
2Microsoft 2
This will start installing the

Modern apps on the
windows 8 .
Once the Deployment

operation Progressing
completed. Go to windows 8
Start Screen and verify the
existence of the
HelloWorldCS existence
2.3 Deploying the App via the Windows Image

This Step demonstrates how to use Deployment Image Servicing and Management tool ( Dism) for App
Provisioning to Deploy the Apps Online .
Creating the Task Sequence to Build and Capture Image

Perform the below steps on the
Windows 8 Reference machine
which is not joined to
Domain.Navigate to %WinDir%\
System32\Sysprep and Click on
the Sysprep.exe.
On the Syspep Choose Enter Audit

mode as the System Cleanup
action and shutdown option as
Page 9
2Microsoft 2
Reboot
The Sysprep will cause the

machine to login into the Audit
Mode.
We will use the Dism.exe to list

down the provisioned apps before
we add the new one
Open the Elevated command

prompt and navigate to %Windir
%\System32\Dism.exe
Page 10
2Microsoft 2
To display the current Provisioned

apps run the Command
Dism.exe /Online /Get-

ProvisionedAppxPackages
In order to enable all provisioned

apps for the Administrator
account. You must set the
LocalAccountTokenFilterPolicy
registry key
Page 11
2Microsoft 2
Allow trusted applications updates

the following registry setting:
HKLM\Software\Policies\
Microsoft\Windows\Appx\
AllowAllTrustedApps = 1
Now we will import the App

certificate into the Root trusted
Certification Authorities
Type Certificate in the Windows

Start screen. and search the
certificates under the Settings and
choose Manage computer
certificate
Navigate to Trusted Root

Certification Authorities right
click and import
Navigate to C:\Apps\Hello World

Certification
Page 12
2Microsoft 2
Go to command prompt and

navigate to %Windir%\System32\
Dism.exe
And Run the Provisioned App

command to Add the Application
Dism.exe /online /Add-

ProvisionedAppxPackage
/PackagePath:C:\App\
HelloWorldCS_1.0.0.0_AnyCPU.ap
px /SkipLicense
Now run the Dism,exe /Online

/Get-ProvisionedAppxPackages to
view the provisioned Apps
Compare the /Get-

ProvisionedAppxPackages Result
before adding the LOB apps and
after adding the provisioned app .
Page 13
2Microsoft 2
Under the Windows Start Screen

type the lusrmgr.msc and enter
Under Local Users and Groups

(Local) choose the Users Node and
navigate to Administrator user and
choose the properties.
Deselect the Account is Disabled
Navigate to HKLM\Software\
Microsoft\Windows\
CurrentVersion\Appx\
AppxAllUserStore\Application
Note the First Application

Represent the exact Package ID as
reported by Get-
ProvisionedAppxPackages .
Page 14
2Microsoft 2
On the MDT Server we would

create the new Task Sequence for
Sysprep and Capture.
Right Click Task Sequence and

select new Task Sequence and
supply the Task Sequence ID and
Task Sequence Name
Under the Select template choose

the template sysprep and Capture
task Sequence.
Select the Windows 8 Operating

System.
Page 15
2Microsoft 2
Please select the Default on the

Specify Product key
Under the OS Setting page specify

the organization name
Under the Admin Password Please

specify the Admin password
Please select default for the rest of

the pages
Page 16
2Microsoft 2
On the Reference
Machine .Naviagate the
Deployment Share and invoke
LiteTouch.wsf
On User Crendials wizard specify

the user name, password and
domain which have rights to
connect to deployment share .
Select the Task sequence created

in the previous to allow sysprep
and capture
Page 17
2Microsoft 2
Specify the image capture location
The task sequence will sysprep

and capture the image
Executing the sysprep
Page 18
2Microsoft 2
Create WIM
Import the Captured WIM in the

MDT Workbench
Page 19
2Microsoft 2
Now create the Task Sequence

which will deploy the Captured
WIM
Page 20
2Microsoft 2
Under the Template select the

Standard Client Task Sequence
Page 21
2Microsoft 2
Select the Import WIM in the

Previous section
Page 22
2Microsoft 2
Page 23
2Microsoft 2
Deploy the TS sequence to the

clients.
Page 24
2Microsoft 2
Login to Newly Built Machine

using the Domain Credential
After the login to the machine on

the Start Screen Type the
Application Hello World
Page 25
2Microsoft 2
Launch the Modern application to

confirm the correct functioning of
the App.
Deploying the App via the Config Manager 2012 SP1

Left click on "Software Library_ViewButton (button)" in "System Center 2012 Configuration Manager
(Connected to CAS - SEC - Config Manager Central Site)"
Page 26
2Microsoft 2
Left click on "Application Management (tree view item)" in "System Center 2012 Configuration Manager
Page 27
2Microsoft 2
Right click in "System Center 2012 Configuration Manager (Connected to CAS - SEC - Config Manager
Central Site)"
Page 28
2Microsoft 2
Left click on "Create _Application (text)"
Page 29
2Microsoft 2
Left click on "Type: (combo box)" in "Create Application Wizard"
Left click on "Windows app package (.appx file) (list item)"
Page 30
2Microsoft 2
Left click on "Browse... (button)" in "Create Application Wizard"
Page 31
2Microsoft 2
Left double click on "Name (edit)" in "Open"
Page 32
2Microsoft 2
Page 33
2Microsoft 2
Left click on "Next > (button)" in "Create Application Wizard"
Page 34
2Microsoft 2
Page 35
2Microsoft 2
Left click on "Close (button)" in "Create Application Wizard"
Page 36
2Microsoft 2
Left click in "System Center 2012 Configuration Manager (Connected to CAS - SEC - Config Manager
Central Site)"
Right click on "eText Textbook Reader-copy (text)" in "System Center 2012 Configuration Manager
Page 37
2Microsoft 2
Left click on "_Distribute Content (text)"
Page 38
2Microsoft 2
Left click on "Next > (button)" in "Distribute Content Wizard"
Page 39
2Microsoft 2
Left click on "Add (split button)" in "Distribute Content Wizard"
Left click on "Distribution Point (menu item)"
Page 40
2Microsoft 2
Left click on "EDU-DP- in "Add Distribution Points"
Left click on "OK (button)" in "Add Distribution Points"
Page 41
2Microsoft 2
Page 42
2Microsoft 2
Left click on "Content Destination (pane)" in "Distribute Content Wizard"
Left click on "Steps Recorder - Recording Now (button)"
Page 43
2Microsoft 2
Right click on "eText Textbook Reader-copy (text)" in "System Center 2012 Configuration Manager
Page 44
2Microsoft 2
Left click on "D_eploy (text)"
Page 45
2Microsoft 2
Left click on "Browse... (button)" in "Deploy Software Wizard"
Left click on "Select Collection (window)" in "Select Collection"
Page 46
2Microsoft 2
Left click on "Device Collections (list item)"
Page 47
2Microsoft 2
Left click on "Test Case Scenario Collection (text)" in "Select Collection"
Left click on "OK (button)" in "Select Collection"
Page 48
2Microsoft 2
Left click on "Next > (button)" in "Deploy Software Wizard"
Page 49
2Microsoft 2
Left click on "OK (button)" in "Configuration Manager"
Page 50
2Microsoft 2

left click on "Add (split button)" in "Deploy Software Wizard"

Page 51
2Microsoft 2
Left click on "Distribution Point (menu item)"
Left click on "EDU-DP-10028.SEC.GOV.QA (text)" in "Add Distribution Points"
Page 52
2Microsoft 2

Left click on "OK (button)" in "Add Distribution Points"

Page 53
2Microsoft 2
left click on "Next > (button)" in "Deploy Software Wizard"

Left click on "Purpose: (combo box)" in "Deploy Software Wizard"
Page 54
2Microsoft 2

Left click on "Purpose: (combo box)" in "Deploy Software Wizard"

Page 55
2Microsoft 2


Page 56
2Microsoft 2
left click on "User notifications: (combo box)" in "Deploy Software Wizard"

left click on "Display in Software Center, and only show notifications for computer restarts (list item)"
Page 57
2Microsoft 2

left click on "User notifications: (combo box)" in "Deploy Software Wizard"

left click on "Display in Software Center and show all notifications (list item)"
Page 58
2Microsoft 2


Page 59
2Microsoft 2

Mouse drag start in "Deploy Software Wizard"
Page 60
2Microsoft 2
Mouse drag end in "Deploy Software Wizard"

User left click on "Completion (pane)" in "Deploy Software Wizard"
Page 61
2Microsoft 2
left click on "Steps Recorder - Recording Now (button)"
Page 62
2Microsoft 2
Page 63

Windows 8 Modern Apps Sideloading

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Windows 8 Modern Apps Sideloading

Uploaded by

Copyright:

Available Formats

Windows 8 Modern Apps Deployment

Manoj Kumar Pal

2.0 Preparing and Deploying Windows 8 Side loading..............................................2

1.2 What is windows 8 Side loading

1.3 Windows 8 Side loading Requirements

2.0 Preparing and Deploying Windows 8 Side loading

For the Windows 8 Modern Application Deployment for in this document :

1. Creating the Group Policy for enabling the side loading

This GPO eventually modifies the registry value AllowAllTrustedApps to 1.

Under Local Computer

Double-click the Allow all

In the Allow all trusted

Click Apply and OK

Importing the Certificate to Trusted root Certification Authorities.

For the demo purpose we

The demo apps attached as

Ensure the Windows 8

Verify the Group policy is set

After verifying the side loading

Navigate to Certificate- Local

Under the Certificate Import

Navigate to the Certificate file

Under certificate store make

Under the completing the

Once the import would be

Verify the Newly imported

The entire step of the

Side loading using windows power Shell Command Lets

Right Click windows

Accept the UAC Prompt.

Under the Windows Power

This will start installing the

Once the Deployment

2.3 Deploying the App via the Windows Image

Creating the Task Sequence to Build and Capture Image

On the Syspep Choose Enter Audit

The Sysprep will cause the

We will use the Dism.exe to list

Open the Elevated command

To display the current Provisioned

Dism.exe /Online /Get-

In order to enable all provisioned

Allow trusted applications updates

Now we will import the App

Type Certificate in the Windows

Navigate to Trusted Root

Navigate to C:\Apps\Hello World

Go to command prompt and

And Run the Provisioned App

Dism.exe /online /Add-

Now run the Dism,exe /Online

Compare the /Get-

Under the Windows Start Screen

Under Local Users and Groups

Deselect the Account is Disabled

Note the First Application

On the MDT Server we would

Right Click Task Sequence and

Under the Select template choose

Select the Windows 8 Operating

Please select the Default on the

Under the OS Setting page specify

Under the Admin Password Please

Please select default for the rest of