Deploy an MSI Application using Intune

In this blog post, we will explore how to deploy the MSI application file using Intune admin center. Intune provides a Line-of-business app option to deploy MSI files. We will use it to deploy a sample MSI file.

Line-of-business (LOB) app supports these file extensions for Windows apps including .msi, .appx, and .appxbundle. Now, Let’s check the steps.

STEP 1 – Download the MSI Installer file

The first step is to download the MSI installer file from Software vendor’s website. I will be taking an example app called Ring Central. However, below steps will work for any MSI file.

Download MSI Installer file
Download the MSI Installer file

STEP 2 – Deploy MSI file using Intune

You can follow below steps to add and deploy the MSI app from Intune admin center.

Deploy MSI file using Intune
Deploy MSI file using Intune
  • Using the App type drop-down, Select Line-of-business app option.
Deploy MSI file using Intune
Deploy MSI file using Intune
  • Browse to the downloaded MSI file by clicking on folder Icon.
Deploy MSI file using Intune
Deploy MSI file using Intune

App Information

  • Provide Name, Description, and Publisher Information.
  • App Install Context – This will depend upon the application MSI Installer. If the app allows user based Installation then you will be able to select this option. Otherwise, it will be pre-selected and greyed out.
  • Ignore App version: Select Ignore app version to Yes or No based on below criteria:
    • Select Ignore app version= Yes If you want to app to be Installed when its not found on the target device. If the app is already there but the version number is different, it will be ignored and app will not be deployed.
    • Select Ignore app version= No If you want to app to be Installed when its not found on the target device or the app version you are deploying is different than the one already Installed on the target device.
Intune Ignore App version setting
Ignore App version
  • Command-line arguments: Provide the command-line switches that you want to execute during app installation. For example, when installing the RingCentral application, you can use the switches “/norestart” and “/qn“. This ensures that the device is not restarted after the application is installed, and the installation process runs silently.
Provide Information about how the app should be deployed by Intune
Deploy MSI file using Intune

Assignments

Add an Azure AD group containing users or devices. You can also click on Add all devices or Add all users.

Assign MSI application to Windows 10 or Windows 11 devices
Deploy MSI file using Intune

Review + Create

On the Review + create tab, review the app deployment and click on Create.

Sync Intune Policies

The device check-in process might not begin immediately. If you’re testing this policy on a test device, you can manually kickstart Intune sync either from the device itself or remotely through the Intune admin center.

Alternatively, you can use PowerShell to force the Intune sync on Windows devices. Another way to trigger the Intune device check-in process is by restarting the device.

STEP 3 – Monitoring of MSI app deployment

You can check the status of MSI app deployment from Intune admin center by following below steps:

  • Login on Microsoft Intune admin center
  • Click on Apps All apps
  • Click on the app deployment and check the Overview tab to find the Device status and User status.
  • Click on Device install status, and User install status under monitor to get the status of app deployment per device and per user.

End-user Experience

It didn’t take much time to deploy this application on target devices. I waited for less than 10 minutes and the app was deployed on my device. It was really quick and easy. Once the app is deployed, you can confirm the installation either by checking desktop shortcuts (If app has created one) or by using Programs and features and finding your app in the list to confirm.

Below screenshot is from Programs and features on a windows 10 device which shows that the app has been installed successfully.

Verification of Intune MSI App deployment from Client computer
Verification of Intune MSI App deployment from Client computer

FAQs

Is there any other method to deploy the MSI application file using Intune?

Yes, you can use Win32 app method for deployment of MSI files. However, using Line-of-business app option is easier. You can use the Win32 app method for MSI If you have a complex app deployment. Please refer to the link: Deploy MSI using Win32app for more Information.

I want to Uninstall the MSI app deployed via Intune

In the previous sections of this blog post, I provided the steps for deploying an MSI Installer-based application using Intune. Now, we will utilize the same application deployment and add devices under the Uninstall assignment section.

Let’s check the steps:

– Login to Microsoft Intune admin center
– Go to Apps > All Apps > Click on the app deployment you have created.
– Click on Properties under Manage
– Click on Edit next to Assignments.
– Target the users or devices under the Uninstall assignment section. [Refer to the screenshot below].

[Make sure not to include the same device in both the Uninstall and Required assignments. This could lead to the app repeatedly installing and uninstalling, causing unnecessary resource usage.]

Uninstall MSI App using Intune admin center
Uninstall Assignment

Is there any way to retrieve the uploaded MSI file on Intune

After creating an app deployment package in the Intune admin center and uploading an application MSI Installer or exe Installer file, you can’t download it directly from the Intune admin center.

However, you can retrieve it from the client device. I’ve outlined the steps for retrieving MSI / Win32 app setup files from a client device in another blog post titled “Retrieve MSI / Win32 app setup files uploaded on Intune.”

How to find Silent switches of any MSI Installer?

To find silent installation switches for any MSI installer, you can download the MSI installer from the vendor’s website and run it with the “/?” switch from a PowerShell console or the Windows command prompt. This action will display a list of all the available parameters and switches that can be used with this MSI file.

For example:
ZoomInstallerFull.msi /?

How to find Intune logs for MSI app deployment?

You will need to check the logs for troubleshooting if there are any issues with application deployment. The app deployment logs are stored in a file called IntuneManagementExtension.log which is stored at C:\ProgramData\Microsoft\IntuneManagementExtension\Logs location. Please make sure to open the most recent log file by sorting it with the Date modified column. The best way to read any .log file is to use CMTrace tool.

Intune logs for MSI deployment (Line-of-business app)
Intune logs for MSI deployment (Line-of-business app)

Leave a Comment