Customer Snapshot
Industry: ITAR‑regulated aerospace manufacturing
Scale: 20,000 endpoints
Environment: Mixed Windows and macOS fleet with Citrix virtual desktops, with Autopilot device provisioning as a strategic priority
Key constraints: Strict security and governance, including US‑citizen implementation and new‑software governance scans for any new endpoint agent
Challenges
Before Application Workspace, the team was clear about what had to change:
Packaging overhead was unsustainable.
The infrastructure lead described their goal: “bypass or eliminate… packaging overhead” and “solidify a tool for third‑party patching.” They also needed to “select something very quickly,” so a long request for proposal cycle wasn’t an option.
Too many app stores for users.
Architecture leaders were adamant: “We do not want multiple stores.” They needed one user experience spanning Windows, macOS, and Citrix instead of separate portals that confused employees and added support load.
Limited control and visibility with agentless options.
A competing third‑party patching product was attractive for its light footprint, but the team noted it “does not have a client,” raising concerns about how much control and telemetry they would actually have.
Risk of losing customizations on update.
Application owners worried that any change to a vendor package would be lost the next time that app updated, forcing them back into manual re‑wrapping. Proving that customizations would persist was a non‑negotiable requirement.
Security, ITAR, and governance hurdles.
Any new agent had to pass a formal new‑software request, OneTrust review, and meet ITAR constraints without slowing down the project.
Solution: Application Workspace
The customer ran a head-to-head evaluation between Application Workspace and an agentless third-party patching tool, framing the choice as “footprint versus capability.” Application Workspace’s lightweight agent won, giving them end-to-end control over delivery and telemetry instead of relying on Intune alone, with dashboards that answer monitoring questions directly in the platform.
Three capabilities met their must-haves:
Persistent customization: package changes carry forward when new versions land in the catalog, avoiding constant re-wrapping.
One workspace across Windows, macOS, and Citrix: a single catalog under one license, honoring their “no multiple stores” requirement.
Identity-based device provisioning and fast third-party app catalog: target apps during Autopilot by identity or context (aligning with their Entra ID/Active Directory and Autopilot workflows), deliver the curated app set at enrollment, and keep devices in step with zero-day releases as new builds arrive in the managed catalog.
Results & Impact
One app workspace across platforms.
The customer selected a 20,000‑endpoint Application Workspace bundle (including Right Click Tools) as their unified user app store across Windows, macOS, and Citrix, ending the “multiple stores” debate and giving employees one place to find software.
Clear path to eliminating packaging overhead.
An agent-powered catalog where customizations persist and new versions appear in roughly a day, giving them a clear roadmap to reduce the manual packaging effort that triggered the project.
Stronger delivery control and telemetry.
Compared with the agentless option, Application Workspace delivers clear success/failure data in its own dashboards, without depending on Intune reporting or slow retry cycles.
Closing
For organizations that need to cut third‑party packaging overhead, avoid multiple user app stores, and still meet strict security and governance requirements, Application Workspace delivers an agent‑powered platform with persistent customization, a fast third-party app catalog, and unified app access across Windows, macOS, and virtual desktops.
It gives IT teams the control and visibility they’ve been lacking. IT teams can see it, fix it, and move on, while employees simply open one workspace and get the apps they need.
