Microsoft Intune Win32 App management support was announced at Microsoft Ignite 2018, this has been the biggest ask from customers around the world since Microsoft released Windows 10 back in Aug 2015 with a build-in MDM stack so we was able to AzureAD join and automatic MDM enroll a device into Microsoft Intune. At the beginning we only had single MSI install, Windows Store and Appx support in Intune.

In 2017 we got the Intune Management Extension where we was able to create a powershell script that downloaded (from a “fileshare”) and install the app without any installation status went back to Intune – so the IT Pro was able to see if the applicaiton was a fail or success.

So the Win32 app deployment feature is Intune Management Extension with the availability to deploy complex application. If you know of the application model in SCCM this new feature will be very familiar to you.

If you want more – take a look at the Microsoft Ignite Sessions:
BRK3285 – Deep dive into evolution of Windows app management with Intune

Requirement for running the new Win32 app deployment feature is:

Windows 10 version 1607 or later (Enterprise) Windows 10 AAD or hybrid AAD joined devices with automatic MDM enrollement

Windows application size is capped at 2GB per app in the public preview

Note: Microsoft has not tested on Windows 10 Pro

First you need to get the prep tool from github

Microsoft Intune Win32 App Upload Prep Tool

There are very few parameters that can be used

-h Help -c Setup folder for all setup files. -s Setup file (such as setup.exe or setup.msi). -o Output folder for the generated .intunewin file.

-q Quiet mode

In this blog post I will show how to deploy Adobe Reader DC – see how to packages Adobe Reader here
It is to use Adobe Reader as a example – it has all that have been missing from Intune, multiple files and a .exe installer.

I have copied the IntuneWinAppUtil.exe in c:tempAcroRdrDC19 and put all the files in c:tempAcroRdrDC19AcroRdrDC19 and want the output in this folder : C:tempAcroRdrDC19AcroRdrDC19.intunewin

So the command looks like this:

.IntuneWinAppUtil.exe -c C:tempAcroRdrDC19AcroRdrDC19 -s setup.exe -o C:tempAcroRdrDC19AcroRdrDC19.intunewin

Is runs at at last it completes at 100% under the way it is encrypting with SHA256 and compress the installations files like a .zip file – in this example it goes from 386MB to 202MB

How to create the app in Intune:

Start the Microsoft 365 Device Management portal : Https://devicemanagement.microsoft.com

1. Click Client apps
2. Click Apps
3. Click Add

Add app – app type Windows app (Win32) – Preview

1. Select app type : Windows app (win32) – preview
2. Click Select file
3. Click to upload the .intunewin file

1. Click Configure
2. Enter Name : Adobe Reader DC
3. Enter Description : Adobe Reader DC PDF reader
4. Publisher : Adobe

Scroll down until :

1. Click Select Image
2. Upload Icon file to Adobe Reader

1. Click Configure
2. Enter the install command – for Adobe Reader it is “setup.exe -s”
3. Enter the uninstall command – MsiExec.exe /x {AC76BA86-7AD7-1033-7B44-AC0F074E4100} /q

In the event log you can see the MSI Installer ID used for the uninstall string

1. Click Configure
2. Operating system architecture – select 32-bit and 64-bit
3. Minimum operating system – select Windows 10 1607 (unless you want to restrict to a newer version of Windows)
4. Disk space required (MB) – enter 475

You can always see on a device where the software is installed in Apps & Features in the settigns app on Windows 10 what the disk space required (MB) is.

1. Click Configure
2. Select Manually configure detection rules (It can also be a custom script)
3. Click Add

Detection rule

1. Rule type : MSI (It can also be a file or registry)
2. MSI product code : enter the MSI product code

As the last point you can specify a custom return code if the application installer is not using a standard return code.

Then the application is uploading

Then you are ready for the assignment

1. Click Assignments
2. Click Add group

Assignment type – there are 3 different options

• Available for enrolled devices – in the company portal
• Required
• Uninstall

1. Select Available for enrolled devices
2. Cli

In the Audit log you can see that the application is created

More details when you click on the audit entry

Now to the end user experience:

In the Company Portal the app is now ready for the end user to install

Click Install

In regedit you can see all the settings on the device:

ComputerHKEY_LOCAL_MACHINESOFTWAREMicrosoftIntuneManagementExtensionAppsb9720458-6abe-4061-8c59-04808b24545f

Happy deployment

Read more:

Intune Standalone – Win32 app management (Public Preview)