S01E07 - Publishing Win32 Applications using Microsoft Intune - (I.T)

00:00 - Intro
01:03 - Sneak peek: Public preview of Win32 application deployment using Microsoft Intune
techcommunity.microsoft.com/t...
02:31 - Intune Standalone - Win32 app management
docs.microsoft.com/intune/app...
02:47 - Microsoft Mathematics 4.0
www.microsoft.com/download/de...
03:40 - Microsoft Win32 Content Prep Tool
docs.microsoft.com/mem/intune...
15:27 - Add a Win32 App to Intune
docs.microsoft.com/mem/intune...
26:01 - Troubleshoot Win32 app issues
docs.microsoft.com/intune/app...
37:56 - Discussion
45:30 - Wrapping up
Here’s a companion blog where we talk about what went wrong with our command line.
www.asquaredozen.com/2019/08/...
Visit our websites and social media for more or to get in touch with us
Steve Hosking - Microsoft EM+S MVP
/ onpremcloudguy
steven.hosking.com.au/
mvp.microsoft.com/en-us/Publi...
github.com/onpremcloudguy
Adam Gross
/ adamgrosstx
www.asquaredozen.com
mvp.microsoft.com/en-us/Publi...
github.com/AdamGrossTX
Ben Reader
/ powers_hell
www.powers-hell.com/
github.com/tabs-not-spaces Visit our websites and social media for more or to get in touch with us

[@Hans-gb4mv]

I know I'm a few years late to the party, but today, after watching a bunch of these videos (out of sequence) I have to say: thank you. These videos are very informative and the lack of polish on the demos is great as it shows that failing is not that abnormal as some people make it out to be. And while the videos are a little outdated, for example by using the old intune portal, a lot of what is shown is still applicable today.

[@bosniak006]

What you guys are doing here is priceless!!! Thanks for sharing your experience!!!! Fantastic!!!!

[@markmarquez3390]

I've been enjoying your videos. It has helped me get up and running quickly and your useful insight and commentary into why you want specific settings enabled/disabled is extremely helpful. Keep up the good work.

[@IntuneTraining]

Thanks Mark! It’s comments like these that help keep us going. Glad you are enjoying them!

[@timcsmedic2162]

This is the first dip I have taken with Intune, it takes out alot of the work for MSI Guid detection. This Is GREAT!!!! Great video!

[@anthonybell5537]

I've been enjoying your videos guys; I particularly liked the comments about why are you packaging updates every month and letting things break to show you are actually doing something to keep it running smoothly.

[@pervestergaard9617]

Awesome videos guys !! Really helpful! Keep them coming 😀👍

[@TheTocas97]

i'm coming form Mattias Melkersen channel ( name : MEM - tips and tricks ) ! you guys are amazing ! keep going ! Big Thanks

[@lltagged]

You guys are pure gold. Enjoyed this vid a lot even though you didn't quite get it done as intended. :} Keep them coming.

[@moepskie]

Great vid guys cheers. We've just started with Intune in our organization and you've been some great help. Also liked the discussion about the Store Vs Win32 and LOB, because I'm exactly facing that issue in my organization. Our seniors absolutely hate the idea of letting applications automatically update themselves. They prefer to roll out updates manually because they want to test them first and don't want to risk breaking anything in our current environment. Meanwhile they don't realize how much time and work it takes to maintain this process, not to mention that delaying an update for at least a couple of days could form a security risk. Trying to convince them for ages already to let at least part of the updates happen automatically, lol.

[@markbowd1]

Great work guys ! really helping me understand Intune better!

[@poornachandraraomandalapud6867]

This is awesome stuff , appreciate your efforts ! Looking forward for a troubleshooting session , may at later time :)

[@jonathanschulz]

I like the "under the hood" information a lot ... great video, thanks!

[@bitgamerx9574]

Thanks guys! To add to your arguments about letting app auto-update and I've seen on multiple occasions orgs mess up a custom package update so they would have been better off utilizing auto-updates.

[@yashpreetricky]

amazing stuff, thank you for all the info

[@dp4491]

This is the first time I've watched this one. Great intro! - I lol'd

[@GtooU]

I'm very much enjoying this series. I have recently left an organization as a Desktop Management Admin. The company has plans to move too Intune but I will not be there to experience this. So your videos are a great insight of what I can expect moving forward in my career and giving me an idea of where to concentrate. You explain every thing quite well and is much appreciated. One comment however; you gotta stop saying "C you next Tuesday" LOL.

[@IntuneTraining]

:-) thanks for making it to the end of the videos. I think you’re the first person who’s ever caught that one. Good luck in your career. Hope the videos help.

[@pedrocontrerasavendano8578]

thanks a lot for this video guys

[@guilmer55]

It helped me a lot, thanks!!

[@FarNorthNetworks]

Love it...c u next Tuesday...priceless

[@tony6626]

Awesome videos guys, really enjoying the series. Anything on OEM configuration?

[@lifestyle.guru007]

Good explanation

[@jonboy2950]

It might be worth pointing out that before packaging an app on any system it should be tested manually on a local machine first because all you are doing on Intune or Config manager is configuring the delivery method of that app to devices, once it arrives and begins the install the whole process gets handed off to the client. So testing client side first makes sense and troubleshooting much easier.

[@michaelwaterman3553]

I see you forgot to bring a sacrifice to the demo gods before the start 🤣. Good info again!

[@GATOtyger]

Hi, how do you manage win32 updates? When you assign w32app to autopilot group (all your devices), when you have to update your w32 app how do you handle that? - replace the package so it will redeploy to all devices (they probably have the updated version already? - assign uninstall old package and assign install new package? - or do you have a way to scope new autopilot devices and existing devices? This all comes to the lack of supersede options and the option to distribute app to new devices only instead of to existing devices.

[@devinmcelheran7242]

I'm curious why the setup file (Setup.exe/App.msi/LaunchMe.bat) is specified in both the IntuneWinAppUtil as well as in the Intune Win32 application deployment blade, does anyone know why it has to be provided twice?

[@faajbuhr]

I do have questions about management of the applications. 1. If an app deploy fails (3 times) during initial rollout/installation of the device. What are the options to force a redeploy a failed app (win32 for instance or Office 365) without interaction of the user? 2. What is te prefered step-by-step method of rolling out a new version of an application that is not auto-updating? I might missed if there is a mentioning somewhere in the video. For that I appologize. Thanks in advance!

[@Leoninmiami]

Great stuff guys! You really want two cores on VDIs. Been through this pain myself. I've deployed hundreds of Intune machines. Often times the portal will report that it failed even though it installs correctly. Usually a refresh or a restart will cause the "failure" to update and be reported as "Successful".

[@IntuneTraining]

Thanks! Not sure if you noticed the link in the video description, but we discovered what was causing the failure was and I wrote a quick blog about it.

[@Leoninmiami]

@@IntuneTraining I've had that happen to me too!

[@XwolfBane18]

@@Leoninmiami could I trouble you for some advice I’m trying to wrap my head around this and getting stack on things I done research but I can’t get anywhere

[@Wasser-fz9ub]

Hello, do you have a hint when published Apps are not shown in the Company Portal? MS Native Apps from the Store are shown, but not the win32 ones

[@IntuneVitaDoctrina]

Great video, this was recorded in 2019 so will check the others, but the logging in Intune isn't that great, to see if an app failed and such... still learning but doesn't seem to be as nice as SCCM that got a lot of logs, and you see the package name and program, here it is often an ID you cannot see directly, you have to reference it etc..

[@SedmaLupo]

Thanks for your videos. I have 2 questions about this kind of app distribution technique: 1. When the content is download from Intune Blob, is there a place inside the local PC where Intune caches content (like CMMCACHE in ConfigMgr)? 2. Apart from consulting Intune dashboard, is there a place inside the local PC in which we can see related application status messages? (event viewer, log files etc). Thanks in advance. Andrea

[@DeepFriedLettuce]

I realize your post is months old, but I would recommend looking up the Lazy Admin. The Guide they have for azure for utilizing Azure Blob for app deployment downloads the files to the user's Appdata folder. Look for the guide titled "DEPLOY INTUNE APPLICATIONS WITH POWERSHELL AND AZURE BLOB STORAGE."

[@manolito7045]

Thank you very much, it's great to follow you, we are between us, in a real world where everything doesn't work at the first time, I really appreciate. I start this monday and I'm already on the E07. Just one question : does Netflix know you ? It's a shame you aren't on it ^^

[@liryco8795]

Hi guys, thanks very much for these tutorials. We're a small company and this help is very much appreciated as we do not have a dedicated IT service. Just one question though, I'm trying to install Winmerge, which is an exe file, not an msi. And when uploading the .intunewin file into Intune, the command files for install, uninstall, detection rule.. are not automatically filled like in your example. Is it normal ? Woud you know where to find the help to manage to fill these fields ? Thanks again and keep on the good work !

[@cihanakgol5826]

Hey guys great videos very helpful and many thanks. Just wondering, when we create apps within intune for deployment (line-of-business-apps, does intune maintain the configured app (like installing the latest version of Chrome) the way it does 365? Because there is an option for 365 deployment to choose the latest version to be installed. This could be because the software is owned and maintained by Microsoft. Just wondered if there is an option like the software called PDQ deployment or even ninite-pro to update the software database and provide the latest versions?

[@IntuneTraining]

I'm not sure that even the Office LOB app does this. I'm pretty sure that it just gets the latest version at the time you are creating the LOB app. It doesn't keep it updated. I could be wrong, but that's my expectation of that setting. docs.microsoft.com/en-us/intune/apps/apps-add-office365

[@IvanRosaT]

M$ will keep the most stable version, if you follow the "ODT(Office Deployment Tool)" within Intune.🙂.exam topic by the way... Furthermore for MSI and EXE deployment s... They are two solutions aside from the video, PPKGs and the other method there's not named for it but I'd like to call it "compression modules" ( is a similar process like in the video but would handle every executable you throw at it) and will spit out a package for SCCM, Intune, ..... This has not been released officially but one day I'll probably create a program for it...I almost forgot there's also method MSIx ...

[@exceptionalpersons4997]

After I created my win32 app, via a powershell script my test devices with secure boot enabled will not boot. If I disable secure boot they work fine. I really don't want to physically touch 500 computers to shut secure boot off LOL. Any insight?

[@shreyverma1227]

hi Steven, I am trying to deploy a Wifi Driver from Intune. But I am a little stuck at the command line. Would you be kind to help/guide me, please?

[@Gympie5]

Can someone help me? I want to create a line-of-business app with a .msi installer. The installer is dual-mode (AllUsers=2), for user context and installable via Company Portal. I noticed the installation fails because it tries to install in "PerMachine" / "Device" mode. Can someone explain why Command-line arguments doesn't work but executed on the mdm install agent?

[@IntuneTraining]

Don't use line of business. There's a bunch of reasons why not, but the key one is lack of delivery optimisation. Read up on how to package and publish win32 apps. We've got heaps of videos on the subject. -- Ben

[@tehtron]

I would like to see a large package install done that bigger than 8gb's. For example adobe creative suite

[@jacobcannamela784]

I think we need more discussion on auto-updates with win32 packaged apps. That may need its own video lol. Chrome and adobe cannot be found in the store, and have no choice but use a win32 deployment.

[@WilkieJoissaint]

How to deploy a custom app which exe into intune

[@suziepiper6812]

When you deploy the app in Intune do you have to manually install it via Company Portal? Doesn't it install automatically when you put it out?

[@IntuneVitaDoctrina]

you can do both, assign or set as require

[@Timmy-Hi5]

Happy Sunday, If have understood correctly, you have to use the local machine with Autopilot configuration and then upload apps to Intune as per details in videos. Is it possible then to configure one Autopilot machine with all apps then use that as a golden image for publishing to corp environment? And the last question, all apps have to be updated periodically, obviously, Intune would know where to look, so it had to be done manually, correct? Regards Tim

[@IntuneTraining]

AutoPilot isn’t designed to use a “Golden Image”. You simply deploy the same apps and settings to all of your devices so they get built the same way when they are built with AutoPilot. You can also use White Glove if you feel you need to pre-install apps - but that is really an extra step that should be avoided if possible so you can get out of the “imaging” business and simply provision devices as needed for users.

[@Timmy-Hi5]

@@IntuneTraining Thanks 👍 I will try pilot with corporate apps and see if it would work. Since there's a lot of these legacy in house build apps, not sure if possible to package them. Cheers for replying 🍺

[@jimcopeland4011]

So this is for a .msi file, but what if you need to push out a .exe file with a batch script?

[@jacobcannamela784]

Same question here

[@MikeLister]

Would you use Intune to push the SCCM Client down to a machine and then let the SCCM client go to a distribution point on the internet to get all the additional updates and packages?

[@IntuneTraining]

That’s Co-Management and yes, you can do that.

[@MikeLister]

@@IntuneTraining do you have a video on that?

[@Jackson-IT]

Thanks for the great videos. Can you create a tutorial how to update a Win32 app with Intune? Example 7-zip.exe (with IntuneWinAppUtil.exe) Version 18.06 (installed on devices) to Version 19.00 (push with Intune). This would help me a lot

[@skipp190]

Sorry to be a little late to this party, but I am running into the same issue when trying to install an MSI using Intune. How did you get to where you knew what install command you needed to use during installation?

[@IntuneTraining]

This was our issue. Hope it helps. www.asquaredozen.com/2019/08/21/troubleshooting-win32-app-installs-in-intune/

[@IvanRosaT]

To figure out the silent command of an application, " nameOfTheExceutable /? " Most developers will leave note for the deployment

[@andrewmcallister1808]

I was trying to run IntuneWinAppUtil from a PowerShell ISE window (same command as in the video "IntuneWinAppUtil.exe /?") and it kept failing with an Unhandled Exception error, as soon as I switched to a normal PowerShell window i ran fine (both programs were running as administrator, not sure why one worked and the other didn't)

[@IntuneTraining]

It can have issues in some terminals - try it in CMD or just in a non-emulated terminal like powershell.exe.

[@devinmcelheran7242]

I script the creation of my intunewin files with PowerShell and I've found the same thing happening when testing the script from VS Code. I believe that it boils down to the differences in the host (program that PowerShell is running in). This is what the new Windows Terminal is all about, getting away from the old CMD Host. It appears that the IntuneWinAppUtil relies on something in the older CLI host.

[@BlackV27]

/qn would cancel the /passive wouldnt it

[@streamtest8131]

Where did you create your cartoon avatars? They look awesome

[@IntuneTraining]

Check out David Neal on Twitter. You can order one from his website. twitter.com/reverentgeek reverentgeek.com/

[@Minusburrito]

Where i can et these uninstall command??? I dont undertsand this part :(( i need some help

[@IntuneVitaDoctrina]

Uninstall command depend on application, if you put it as MSI it gives you the default uninstall switches, if it is a setup.exe file you might have to look for other switches or even uninstall.exe files

[@StormInc67]

Hey Guys, enjoyed the instructions they are a great help, but I have tried to extract the msi from .exe files like you have shown in the video. However every time it wants to install the application instead of unpakking the data in the .exe file. Any hint to whats going wrong as an example I tried to extract the .msi from the Firefox Setup 73.0.1.exe which can be downloaded free. Thanks in advance for the help and keep these videos comming. Might I suggest a instruction video (if it is possible with Intune) how to uninstall all the standard applications and freeware from the Os.

[@IntuneTraining]

Not all EXEs have embedded MSIs. You’ll need to download the MSI from their website. www.mozilla.org/en-US/firefox/all/ support.mozilla.org/en-US/kb/deploy-firefox-msi-installers As for uninstalling OS apps, we won’t be doing. It’s not something that we believe is necessary for various reasons. Also, enterprise SKU for 1903/1909 doesn’t have nearly as much of that stuff.

[@StormInc67]

@@IntuneTraining Ok, thanks thought I was missing something here. One other question as I found that creating the intunewin files from the msi's created Gib size files from files that were no bigger then 9000 Kb. Overwriting them with the IntuneWinAppUtil.exe did make them smaller but still over 700 Mb. Can the encryption setting have anything to do with that fact? If set it to 256-Bit for the sys and fixed drives. Any help will again be much appriciated.

[@raymondobdam8399]

This only works when the client is joined to the domain (azure of hybrid) I am following this channel with a client registered (not joined) into azure AD and enrolled into intune but then win32 applications wont show up unfortunately.

[@Noursbear]

However, all these new technologies, saving admin tasks, allowing auto updates etc... we're doing ourselves out of a job ! Wait till a robot does it all

[@sandy-oj2nm]

I take solace in the fact that the internet is an issue everywhere.

[@sjeit-nowra]

Honestly... Microsoft have been doing msi and exe for 20+ years now, and we still have issues deploying them. It is unbelievable that even a training video on the latest way to deploy applications still has the same problems, and its even more unbelievable that there isn't a repository of applications to install these. That last comment as well about making yourself busy is just a joke, if you have things running smoothly you need to repurpose yourself to improving staff usability not just technical usability.