Windows 8 App Deployment in School Lab environment?

Question

After doing some reading and research on Windows 8 Store app deployment from sources like
http://www.microsoft.com/en-us/download/details.aspx?id=39685 and this forum and I am getting pretty depressed.  Here is one part of my scenario which is pretty simple I think.
Lab of 20 Dell 3011 AIO Touchscreens that were depoyed with Win8Ent via MDT2012U1.  For simplicity I will talk about a subset of my problem.  I have 3 classes of Kindergartners who use the lab.  The students aren't capable of really logging
in themselves so the teacher logs them all in to a shared account for each class since all they do is web / app stuff.  I don't want to create 60 accounts for this young of kids since they can't handle the process anyway.
Here is my understanding of what I would have to do if I wanted to install Fresh Paint (a great free app) for all the students to use.
1.  Create a minimum of 4 Microsoft accounts due to device limits of store app install.
2.  Assign / attach those Microsoft accounts to specific lab machines (while logged in as each shared student account).
3.  Login to each of my 20 lab machines as each of the 3 share accounts (which can't have roaming profile since Windows <-> Microsoft account association now needs to be unique).  This would be a minimum of 60 individual logins for this one
app and one grade.
4.  Install the app on a per user / per device basis.
5.  Potentially repeat process any time an update is released since the students can't handle it themselves.
I think this is the majority of the process, am I leaving any important steps or details out?  This sounds like it would be HOURS of work to install ONE app for ONE grade.  I could potentially need 5-10 unique apps per grade.
This just isn't feasible on any type of scale.  Even this limited amount of devices / users is overkill when dealing with users who are to young to maintain their own devices or exist in lab environment.  In reading the doc refrenced above it doesn't
seem like there is a solution for this offered by MDT, SCCM or Intune?  Please tell me I am missing the magic deploy button?  Also I don't even want to begin to think about apps that aren't free and managing that.
Thanks for any helpful info.
Brian Hoyt

Answer 1

In reading the doc refrenced above it doesn't seem like there is a solution for this offered by MDT, SCCM or Intune?  Please tell me I am missing the magic deploy button? 
No, you're not missing the magic deploy button :(
If a Windows Store App (aka Modern UI app aka Metro App) is offered via the Windows Store, and not offered directly by the application developer, the only legitimate way to get that app is via the Store, and that requires an MS account.
ConfigMgr offers two "deployment" methods;
a) deep-link into the web-based Windows Store. The logged-on user must have an MS account and use that account to authenticate to the store. even if the app is free.
b) sideload. requires the appx installation package.
There are some other suggestions, but they are unsupported, and rather complicated:
http://social.technet.microsoft.com/Forums/windows/en-US/763dc3d6-8dd2-4157-8f49-159f0826e97a/install-windows-store-apps-to-all-users-or-where-to-get-the-appx
http://social.technet.microsoft.com/Forums/windows/en-US/04dd1938-a558-4cbe-ba70-b89d2d1eb95c/windows-apps-offline-download-and-install
http://social.technet.microsoft.com/Forums/windows/en-US/72ccc40d-76aa-4325-92ae-27386b424e0f/sideloading-applications#bddbcd7f-fec3-4132-b573-b5e3d1aef57f
http://social.technet.microsoft.com/Forums/windows/en-US/b7574287-d134-4a74-b227-f3dd793ab46b/download-appx-package#64745402-2254-4760-bc1f-f7483fc49d35
The last time I spoke with our MS contacts (deployment engineers @ MS), even those guys can't get the MS free apps to sideload.
All the documentation around sideloading appears to be catering for situations where a company has developed that app themselves, or, has commissioned a developer to create a custom app for the company.
Apps which are offered via the Store, seem to only be available via the store. I'm not sure if there is some kind of contractual obligation with MS which demands this? (i.e. in the store means no distribution via other means?)
At this time there are no options to federate an on-premises AD to the Store either. Which would be a nice option, even if it limited the user to free apps.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)