Let’s learn how to download and install Google Chrome using Intune Line of Business Application model. I have explained the steps in the above video (Google Chrome Deployment).
To add a custom or in-house app, upload the app’s installation file. Make sure the file extension matches the app’s intended platform. Intune supports the following line-of-business app platforms and extensions:
- Android (APK)
- iOS (IPA)
- macOS (.IntuneMac)
- Windows (.msi, .appx, .appxbundle, .msix, and .msixbundle)
In this post, we are looking into Windows LOB application deployment. Let’s see how to deploy the “Google Chrome” (Intune Google Chrome?) browser to Windows 10 or Windows 11 devices using Microsoft Intune. I have a post that explains, “Deploy Google Chrome Update with SCCM.”
NOTE! – There is a 0-Day bug with Chrome Browsers. Update the Google Chrome browsers immediately. More details – Chrome’s audio component (CVE-2019-13720) while the other resides in the PDFium (CVE-2019-13721) library.
- Intune Management Extension Deep Dive – Win32 App Deployment Troubleshooting Help Guide
- Troubleshoot Intune Managed Application Deployments Errors
- Fiddler Silent Install using Intune MEM Installation Behavior User
- Intune Logs Event IDs IME Logs Details for Windows Client Side Troubleshooting
Download Chrome Enterprise Version MSI
You can download the enterprise version of the Google Chrome browser from the following Google Server.
I usually download the FULL version of the Google Chrome browser. But, you have an option to download Google Chrome update MSI as well.
Introduction Google Chrome Deployment
Recently Google published a post about the latest vulnerabilities of Google Chrome. And they highlighted this as Zero-day Patch. 0-day patches are highly critical, and you need to update the browsers as soon as possible.
Let’s download the Patch or the latest version of Google MSI from the Google server and follow the steps mentioned in the above video to deploy Chrome update to Windows 10 devices.
Create Intune Chrome Browser Line of Business App
To create Intune line of business (LOB) application, you need to log into the device management portal. Once you log in to the device management portal you can go to the windows application and start creating Intune LOB application.
The creation of the application is straightforward as I have shown in the video (Google Chrome Deployment options). I don’t think you have to worry about the application version shown Intune console. I don’t know how it is getting that MSI version details when we select the Google Chrome MSI.
- Login to Intune Portal https://endpoint.microsoft.com/
- Select Apps > All apps > + Add.
- Select Windows 10 in the Office 365 Suite section of the Select app type pane.
- Click Select. The Add Office 365 Suite steps are displayed.
Thoughts – If you check the MSI version of the properties of that MSI file and compare that with the version which shows in Intune portal, you will get confused. So, don’t worry about that at the moment. There could be some bug in Intune.
Select Line-of-business app to create Google chrome browser application
Click on the App package file and select Application and Click on the FOLDER icon.
Browse using Windows Explorer and Select the MSI – the Google Chrome Browser MSI ( GoogleChromeStandaloneEnterprise64.msi). Click OK to continue
Name: Google Chrome
Platform: Windows
App version: 67.208.87
Size: 57.44 MiB
MAM Enabled: No
Execution Context: Per-Machine
- Click on App Information Configuration
- Fill the App Information (Mandatory information for Line of Business app)
- Name – Google Chrome
- Description – Google Chrome
- Publisher – Google
Select the Logo for the Google Chrome Browser application. Click on Browse (FOLDER ICON).
Copy and Save the Chrome ICON to your computer
Select the saved chrome icon. Intune will automatically upload and analyze the icon. Google Chrome Deployment using Intune Line of Business Application.
- Click OK
- Click OK
- Select the Scope (Tags)
- Click +Add
- Select Tags -> Test
- Click on Select
- Click OK
NOTE! – Intune scope tag guide – Intune Scope Tags Implementation Guide.
Click Add
Upload Google Chrome Browser using Intune Line of Business Application
Once you save the Google Chrome application, Intune will start uploading the MSI 2 Microsoft cloud. This process it’s going to take the same depending on your Internet speed and the size of the MSI.
You can see the starters of the upload in intunes console itself. You can see the percentage of uploads do Intune in the device management portal itself as you can see in the video (Google Chrome Deployment scenarios).
Thoughts – This % of upload notification is very useful instead of some gas works which we used to do in previous versions of Intune.
- Chrome Browser application is now getting uploaded
- Uploading Google Chrome 64% completed
Let’s wait to complete the upload
Google Chrome Assignments to Device Groups
Deployment is called assignment in Intune. I have explained How to assign an application like Google Chrome to the 2 Azure Active Directory device groups. There are different types of assignment types in Intune.
Similar to SCCM, required and available are 2 prominent options. Apart from these 2, you will have another option which is called available for all enrolled devices. This option will make the application available for all MDM-enrolled devices.
Thoughts – If you select available for all enrolled devices, you are in turn removing the dependency of Azure AD assignments. I think this will help to improve the performance of Microsoft Intune in some way.
- Click on Assignments
- Click on Add Groups
This will also help to reduce the workload for Azure Active Directory to analyze different groups’ different logics for dynamic groups etc similar to dynamic collections in the SCCM world. I have used the required option in this Chrome application deployment or assignment.
- Add Groups – Select Assignment Type – Required
- Select the Azure AD Device Groups to include
- Search for Chrome AAD Device Groups
- Click on Select to confirm the AAD Group select
Click OK to complete the Google Chrome application assignment
Click OK (1 group selected – Included Group)
Click on Save
Success – Assignments saved Successfully
Results Windows 10 – Intune Google Chrome
Device Management Console Status
