How to upload and deploy MSI applications to Windows 10 machines with Intune via Azure console? MSI application deployment could be one of the most used features in Intune (at least for a couple of years). In this video post, we will see step by step MSI application deployment (Intune LOB application deployment) process.
This post is also an end to end guide to creating MSI application in Intune via Azure portal. I already blogged about MSI MDM deployment via MDM channel in the following post “How to Deploy MSI App to Intune MDM Using SCCM CB and Intune“. This will include:-
- Uploading the MSI LOB app to Intune
- Deployment or Assignment options
- End User Experience on Windows 10 machine
- How to Troubleshooting with event logs and Pending Sync
- How to get application installation status messages back to Intune console
Upload MSI LOB application to Intune via Azure console
Uploading MSI LOB app to Intune is a very straight forward process. Login to Azure portal and navigate via Microsoft Intune -> Mobile Apps -> Apps -> + Add button and select app type as “Line-of-Business app“. Click on “App package file” and browse to the MSI source file location and click on OK button as you can see in the video here.
You have to complete/fill “App information” section before you can proceed with uploading the MSI to Intune. There are a couple of mandatory fields which you need to fill in. Command line options are also available in this section. But, as per my experience and you can see in the video as well. I have not used any silent switch for MSI, but by default, Intune/MDM on Windows 10 will install the app as silent (without any user interaction or input). Click on the ADD button to complete the MSI app creation process in Intune on Azure portal.
Deployment or Assignment options of MSI Intune LOB application deployment
You need to wait until the application is successfully uploaded to Intune before you can create any assignment (or deployment). An assignment is a method which we use to deploy MSI applications to Windows 10 devices. You can deploy applications to Azure AD dynamic user groups or device groups. In this video/scenario, I used AAD dynamic user group to target the MSI LOB apps. More details available in the video here. There are different deployment types available in Intune.
Available – User needs to go into company portal and trigger the installation
Not applicable – Won’t get installed
Required – Forcefully get installed without any user interaction
Uninstall – Remove the application from the device
Available with or Without enrollment – Mobile Application Management (MAM) without MDM enrollment scenarios.
End User Experience on Windows 10 machine
Windows 10 machines will get the new application deployment policy once the assigned user is logged into that machine. What is the option to speed up the application deployment to the machines? You need to sync with Intune services using the following method (manually). You can go to “Settings – Access Work or School – Work or School Account – Info (click on this button)” and click on Sync. This will initiate Windows 10 machine sync with Intune services, and after a successful sync, the machine will get the latest application policies.
How to Troubleshooting with event logs and Pending Sync
Unlike SCCM/ConfigMgr deployments, we don’t have log files to look at the application installation status via MDM channel on Windows 10 machine. So, you need to rely on Company portal for troubleshooting MSI application troubleshooting. As you can see in the following pic, the installation is waiting for “Pending Sync“. In this scenario, you can initiate a manual sync as I mentioned in the above paragraph to kick start the installation process immediately.
Event logs – Windows Logs – Applications is the place where you can get the status of MSI application installation via MDM or Intune channel on to Windows 10 machine.
How to get application installation status messages back to Intune console
To get the installation status of the MSI LOB apps to Intune on Azure portal, you need to sync work or school account with Intune services. The installation status will be blank in Intune blade unless the device is not synced with Intune after the installation of the application on Windows 10 machine. Initiate the sync via “Settings – Access Work or School – Work or School Account – Info (click on this button)” and click on Sync. Once the sync is completed successfully, you can try to check the Intune Device Install Status in Intune to check the status.