App management with Intune (excellent interactive video walkthrough):
https://docs.microsoft.com/en-us/mem/intune/apps/app-management
Microsoft suggests that Intune is the correct tool for mobile device management, and SCCM is what you use for pushing your ‘gold standard’ images to your workstations, servers etc.
Intune also offers an ‘Autopilot‘ feature for pushing OEM images to new workstations where you don’t need to apply custom ‘gold’ images.
Simple-Security 