Intune Application Deployment using MSI EXE IntuneWin Formats

by

In this post, let’s discuss Intune Application Deployment using MSI EXE IntuneWin Formats. I can help you deploy Windows apps with Microsoft Intune through this guide.

We faced a major limitation in the Intune Win32 App Deployment (Intune Management Extension). Intune supported only a single MSI file, so we could not deploy applications with EXE, multiple MSIs, MST, batch files, etc. Intune solved its limitations with the Intune Win32 App Deployment solution.

Intune Win32 App Deployment allows complex Windows applications to be deployed through Intune. Creating IntuneWin packages will enable you to manage software deployments and overcome limitations efficiently.

Intune offers a diverse range of supported application types, catering to various platforms and requirements. It includes applications such as Store apps, Microsoft apps, Android enterprise system apps, LOB apps, macOS apps, and Windows apps; check out the List Of Supported Intune Application Types.

Patch My PC

What is Intune Win32 App Deployment or Intune Application Deployment

Win32 application deployment is for 32-bit and 64-bit application deployments. Using Intune Win32 App deployment, you can deploy x86 and x64-bit applications.

The Windows 10 MDM channel has limitations when deploying complex Windows applications.

To overcome Windows 10 MDM channel limitation, Intune and the Windows team developed an agent–based (Intune Management Extension) solution to deploy complex Windows applications (EXE, multiple MSIs, MST, batch files, etc.).

So now, Windows 10 (client-side) is ready to deploy complex Windows apps via the Win32 app deployment agent. Intune (Server-side) has implemented a solution called “Intune Win32 App Deployment” to deploy complex Windows applications via the Intune portal.

Intune Application Deployment using MSI EXE IntuneWin Formats -Fig.1
Intune Application Deployment using MSI EXE IntuneWin Formats -Fig.1

Pre-requisites of Intune Win32 App Deployment / Intune Management Extension

Let’s look into the prerequisites of Intune Win32 App deployment or Intune Management Extension.

  • Windows 10 Ent/Edu (1607 version and above)
  • Joined to Azure Active Directory (AAD) or Hybrid Azure Active Directory
  • Enrolled into Intune MDM

Limitations of Win32 App Deployment / Intune Management Extension

Now check the limits of Win32 App Deployment or Intune Management Extension.

  • User context app installation is not available.
  • No dependency and supersedence support.
  • The application size limit is 30 GB.

Download the Win32 App Packaging Tool.

Download the Win32 to app “packaging” tool from GitHub. Is that a packaging tool? Do we need packaging skills to convert complex Windows apps? IntuneWin format?

The .intunewin file is created by the Microsoft Win32 Content Prep Tool, which converts application installation files into the .intunewin format.

IntuneWin Extension Packaging Tool (Intune Management Extension) – https://www.anoopcnair.com/intune-application-model-intunewin-packages/

Download the IntuneWinAppUtil.exe.

You don’t need any packaging skills to repackage existing Windows apps like MSI, EXE, or IntuneWin Extention. This Intune win32 app packaging is similar to zipping a folder using Winzip or 7 Zip.

[Intune Win32 App Deployment Troubleshooting post – Intune Win32 app Troubleshooting]

How to Prepare Win32 App Installation Source for Intune

Intune allows single package files to be wrapped using the Intune prep tool for the Win32 app (Intune Management Extension) deployment.

We will see a step-by-step configuration for using the tool Intune Win32 App Deployment; more details are available in the following section.

  • Download the Intune prep tool (intuneWinAppUtil.exe).
  • As shown below, make sure you copy all the installation files inside the source folder (example here: Adobe)
  • Keep the tool(intuneWinAppUtil.exe) outside of the installation source folder.
Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.2
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.2

It is recommended that cmd or batch files be used to trigger the installation. This approach will provide better control and sequence. I would suggest creating a “cmd” file for installation and uninstallation.

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.3
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.3
  • Execute the Intune prep tool (intuneWinAppUtil.exe). As shown below, specify the source and output folders using the same path. This tool will create the wrapped file. You can see the file with the extension “Intunewin” created.
  • Provide the setup file name. This filename is just for reference. In this example, you will use the cmd file to trigger the installation.
  • The Intunewin file is compressed and encrypted with a SHA256 hash.

(Intune Win32 App Deployment more details are available in the following section)

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.4
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.4

You can use tools like 7-zip to extract the Intunewin file and see what’s inside. You can see Detection.xml and the install source files. The Detection.xml file is created based on the metadata of the setup file. Detection.xml file includes encryption key details.

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.5
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.5

How to Create and Deploy Win32 App in Intune

Follow the steps below to create a Windows app (Win32) using Intune. You already have the intunewin file required to make the app.

  • Sign in to the Microsoft Intune admin center https://intune.microsoft.com/.
  • Select Apps > All Apps> Add, or navigate to Apps > Windows > Windows Apps.
  • On the Select app type pane, select Windows app (Win32) under the Other app types and click Select.
Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.6
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.6

On the Add app pane, click Select app package file. Select the browse button. Then, Select the previously created intunewin file using the Intune prep tool. The app details appear.

  • When you’re finished, select OK on the App package file pane.
Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.7
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.7

Update the app information such as Name, Description, Publisher, Category, Logo, etc. (Intune Win32 App Deployment more details are available in the following section)

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.8
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.8

On the Program page, configure the app installation and removal commands for the app.

  • Install command: Add the complete installation command line to install. For Example, Install.cmd (Contains the installation command for Adobe)
  • Uninstall command: Add the complete command line to uninstall. For Example, Uninstall.cmd (Contains the uninstallation command for Adobe file)
  • Install behaviour: Set the install behaviour for the system or user.

You can also specify the Device restart behaviour and Post-installation behaviour. Click Next to continue.

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.9
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.9

You can configure the application pre-requirements. On the Requirements page, specify the mandatory requirements that devices must meet before installing the update and click Next.

  • Operating system architecture: Choose the architectures needed to install the app.
  • Minimum operating system: Select the minimum operating system needed to install the app.

You can choose from built-in and custom requirements rules when creating your Win32 application. Explore Intune Win32 App Requirement Rules.

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.10
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.10

Configure the app detection rule and select “manually configure detection rule.”

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.11
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.11

You can select any one of the detection rule types below. Here, you can check the registry path for the applications. Most apps are installed in the same location depending on the app architecture. Detection Method for Intune Win32 App.

  1. MSI
  2. File
  3. Registry
Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.12
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.12

This example, I will use the MSI product code as a detection rule. The below screenshot will guide you.

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.13
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.13

Based on your requirement, update the return code and post-installation behaviour.

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.14
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.14

After completion, the app is uploaded to Intune. It also shows a banner message: “Your app is not ready yet. Check back again soon“.

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.15
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.15

You can see the upload status by selecting the notification tab. The uploading is completed at 78%. It also shows a message that the Application has been created successfully.

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.16
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.16

I will deploy this application as “available “for all users for testing. (More details about Intune Win32 App Deployment are available in the following section.) In the next post, 2, we will dive deep into Intune client-side events during Intune Win32 app deployment.

[Intune Win32 App Deployment Troubleshooting post – Intune Win32 app Troubleshooting]

Intune Application Deployment using MSI EXE IntuneWin Formats - Fig.17
Intune Application Deployment using MSI EXE IntuneWin Formats – Fig.17

Resources:

Intune Troubleshooting – https://www.anoopcnair.com/configuration-profile-settings-view/

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Vimal has more than ten years of experience in SCCM device management solutions. His primary focus is Device Management technologies like Microsoft Intune, ConfigMgr (SCCM), OS Deployment, and Patch Management. He writes about SCCM, Windows 10, Microsoft Intune, and MDT.

53 thoughts on “Intune Application Deployment using MSI EXE IntuneWin Formats”

    • I dint got your question completely..
      Are you referring MSI product key configured in Intune console for detection logic ? Intune console will automatically detect MSI key if you select the MSI file for detection logic.
      If MSI is installed successfully in the system then you can verify registry – HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall

      Reply

  2. Hi Anoop,

    I need to deploy a application as win32 app to Windows Autopilot devices, the app has a has a prerequisite of .net 3.5, do you know how how I could use a batch file to install .net 3.5 first and then install the app?

    Thanks
    Steve

    Reply

  3. Hello Anoop,

    I am trying to deploy win 32 application as ‘available’, but I am not able to see the application in company portal, but when I deploy the windows store applications as available, I can see those windows store applications in Company portal. Also, I can deploy the application as required and it is installing perfectly fine, the problem is only with the win 32 apps deployed as “Available”

    Reply

      • Hello Vimal,

        Sorry for the late reply, I have deployed it to user Azure AD group itself. It doesnt show in the company portal app or the portal web url. we are using intune standalone and all the devices are win 10 1709. Also, wanted to let you know, Intune management extension is not getting installed, I figured that will get installed if the win32 app is deployed without any hiccup, if im not wrong.

      • Harsha – Can you please explain what are the steps you followed to troubleshoot Intune Win32 App agent installation issues? or Sidecar agent installation issues? I would recommend to start with Windows 10 MDM troubleshooting from event logs. The other step which I advice is to unenroll and enroll back to Intune. Once that is done, please deploy the Intune Win32 packaged application. This should initiate the Win32 app client installation….

      • Hello Anoop,

        I have removed the enrollment and added it back and tried, still the same, but now I am getting the “ADALUseWindowsAuthenticationTenant failed,” and “Automatic registration failed at join phase” (event IDs : 305, 304), when I checked the event log and dsregcmd /status shows Azureadjoined = no

      • Is this only with one Windows 10 device? What is the version of Windows 10? I would try with another machine if you have not already tried this option. Also, what is the error showing in Intune troubleshooting tab? Pending for Install?

  5. You reference using an install and uninstall script, how exactly did you write that? My familiarity with batch scripts is limited but would it just be msiexec /i software.exe /s or /quiet /QUIET /S /Silent (what is required)?

    Reply

    • Normally i test the application install/uninstall commandline manually. If its sucess , Then i copy the same commandline to batch file and deploy using Intune. Commandline is based on the file type you are using.Please Test commandline manually before trying with Intune.

      Another point is Intune automtically detect the Installation commandline if you specify the MSI file while Preparing Intunewin file format.You can open the Detection.xml and verify.

      Reply

  6. Hello!
    What is the content of the install.cmd and unistall.cmd scripts?
    What is the difference between creating the cmd file or adding the commands manually to the Intune portal in “specify the commands …”?

    Reply

    • Technically there is no difference ..you can directly mention command line and it will work

      But in real production scenario , Packaging team always follow a standard process like using install and uninstall script

      Reply

  7. Hi – is anyone else having trouble selecting the ‘user’ context for Install Behavior on the ‘Program’ pane? For me it’s greyed out, which means my app won’t be installed with admin privileges…

    Reply

  9. Hello Anoop,

    Is there a way to deploy the app in 64-bit mode? regkey imports are added in the WOW6432Node registry. I can’t find a way to add them in the native hive.

    Reply

  11. @Wietse – How did you solve your problem of:

    “Is there a way to deploy the app in 64-bit mode? regkey imports are added in the WOW6432Node registry. I can’t find a way to add them in the native hive.”

    We are experiencing the exact same issue.

    Reply

    • Well, in my case what i did:

      Created a Windows app (win32) App type:
      I had a reg file that needed to be imported. I used “reg import ….” and changed the command to:
      reg IMPORT run.reg /reg:64
      Now the keys are added to the native hive, simple but it worked.

      If you only need to deploy some keys, maybe you can also use Powershell scripting, this one has the option “Run script in 64 bit PowerShell Host”.

      Greetings

      Reply

  13. Hii All,

    I get some error during creation of .Intunewin File “Entries more than 4Gb are not supported in update mode”
    Please help me on the same.

    Regrads
    Kamal

    Reply

  14. I think you have an error in how the Packaging tool. You point to acrordr.exe instead of the full path for the installer application c:\software\adobe\acrordr.exe. According to the documentation and testing you need to put the full path to the installer. Also in the latest version of the pacakge intunewin file, when you go to extract it, you cannot access the installer files directly (I.E. cannot see what is packaged).

    Reply

  15. Hi Anoop/Vimal,
    I have created a package using PowerShell Deployment Tool with some steps for Pre-Installation and Post-Installation. The Application is getting installed successfully, but the pre and post installations are not working. Can you please hep me on this?

    Reply

  17. Hi Anoop,

    I am struggling with Visual Studio 2019 installation via Intune. I have tried to prepare offline installation files but when downloaded, they take cca 40 GB. I know there is a cap of 8 GB per package in Intune. If I run the vs_enterprise.exe –quiet, in Company portal it hangs in “Installing” status for a while, and then fails.

    Thank you

    Reply

  18. Hello,

    I am installing adobe reader using the prep tool. The endpoint downloads the bin file in incoming folder but fails after that. Its not moving to Staging folder, please advise

    Thanks,

    Reply

  21. Hi Anoop

    Is it possible to package a BIOS update app to be deployed using InTune? It would be likely using a BIN file with Setup Information file.

    Reply

  22. I have WinEXE application in C#, .NET Framework 4.6
    Whenever a user is trying to it deploy through Intune, a command prompt is shown.
    The same exe works fine with other bulk deployment tools like SCCM.

    How do I suppress all prompts or make complete silent installation through Intune?

    Reply

  25. Hi Anoop,

    I am a beginner in intune, we have all windows 10 devices on prem AD joined managed by sccm. there is a requirement to manage some of these devices through intune as they are mostly off the network and require company resources and applications/email access. what is the best method to enroll and manage them through intune? is it mandatory to configure co-management to enroll the domain joined windows pc. can I just HAADJ and manually or auto enroll the devices? (irrespective of sccm client on them)

    Reply

  26. Hi Anoop,
    We have ConnectWise Manage Client 64-bit imported as a Windows MSI line-of-business app and not Win32.
    Now I have to automate removing and installing the new version of ConnectWise Manage Client Windows MSI line-of-business app.
    Do you know if this is possible with .msi I can’t find any docs for it .
    Regards
    Tim

    Reply

  27. Hello,
    I have been struggling with deploying applications within User context through Intune. I noticed you had mentioned this in your post above.

    Limitations of Win32 App Deployment / Intune Management Extension
    Now check the limits of Win32 App Deployment or Intune Management Extension.

    User context app installation is not available.

    Is User context app install limited? There is an option even in the screenshots you provided that show the option for Install behavior to be set to either System or User. Does this not control the context by which the application is installed? If I package the .msi as .intunewin, upload to Intune and deploy, even with an ALLUSERS=”” set, the application installs under C:\Program Files.

    Reply

  29. Hi Anoop, i like this
    what about automated packaging, is it worth it? Use the app Pckgr or scapman for faster package or why not?

    Reply

  31. This is a good article describing the process of win 32 apps publishing in Intune. I have a question about MSI self healing and repair using Add Remove programs. Since Intune deletes the source upon install completion, how is self heal or repair handled when the original source no longer exists? Or is this not an issue any more? Please advise if you or microsoft might have a solution for this.

    Reply

  33. Hi,

    is there a possibility if we can wrap the remote update manager in win32 application and can update the adobe applications through this. any article to refer or any suggestion on commands and detection rules with detailed instructions or what file needs to be uploaded as package whether it should be remote update manager or the adobe application. I am new to Intune but struggling from past some days.

    Reply

Leave a Comment