Rubix

View Original

App answers: yes, Intune can do it

If I use Intune to manage Windows 10 devices, can I only push apps from the Microsoft Windows Store?

This is definitely one of the more common questions my team gets asked on a daily (maybe hourly) basis. There is an extreme misconception that Intune can only deploy apps to Windows 10 if they come from the modern app store that Microsoft offers. It would maybe be a serious thought if there were anything in that store someone wanted to use; maybe someday. For now, we can absolutely use Intune to continue to push our standard, “Win32” applications.

FYI: Intune was always capable of deploying applications if they were an MSI based installer. That method is still available today.

Microsoft created a tool for wrapping complete app installation directories in an Intune friendly format. The tool should be called the “Intune App Wrapper”. But instead, we have the Microsoft Win32-Content-Prep-Tool– yes, it rolls right off the tongue. But regardless of it’s name, it does an awesome job.

For this example, we will wrap Adobe Acrobat DC which consists of 8 files required for installation. Follow these steps to prepare the application for deployment:

  • Download the Intune Win32 App Packing tool from the link above.

  • Unzip and place the Intune-Win32-App-Packaging-Tool-master folder in a directory that’s easily accessible like C:\

  • Open the CMD tool as Administrator.

  • Start the packaging tool by typing the full path of the IntuneWinAppUtil.exe and press return.

  • Specify the following values: Source folder (C:\Adobe)

  • Setup file (AcroRead.msi)

  • Output folder (C:\AdobeNOTE: This example places the out file in the same folder as the installation directory, but you can choose a different location

  • After the process completes, you will have an .Intunewin file in your output directory

Now that we have our AcroRead.msi package, we can upload the installer to Intune for deployment.

  • Log into https://portal.azure.com as Intune Administrator and go to Intune – > Client Apps -> Add +

  • From the Add type dropdown, select Windows app (Win32)

  • For App package file, browse to the location of the AcroRead.Intunewin file we created in the previous section.

  • App information can be filled out as needed.

  • At the Program menu, enter the Install commands and Uninstall commands for the application.

  • For requirements, fill out as desired. Note that the Operating system architecture and Minimum operating system are required fields

  • In Detection rules, you can either manually add a rule or use a custom script. When manually adding a rule, you can choose from MSI, File or Folder, or Registry item

  • After saving the application settings, you can now proceed to assign the application to the desired groups

The whole process is pretty straight forward. Note that when running the tool in command line, you can point the “setup file” attribute to anything; batch files, PowerShell scripts, etc. With this last hurdle out of the way, there is no reason Intune cannot handle software deployment for your Windows 10 fleet.