Win32 app deployment method is commonly used to deploy Windows applications, particularly those in .exe format. Intune Management Extension (IME) agent, installed on the MDM device, is used for the Installation of Win32 apps.
For applications in .msi format, you can use the line-of-business (LOB) app deployment method. However, if the MSI deployment is complex, such as requiring pre-install or post-install script, Win32 app deployment method is a better choice.
I’ve detailed the deployment of complex .msi applications using the Win32 app deployment method in my blog post: Deploy MSI using Intune Win32 App Method. For straightforward MSI installers, the line-of-business app deployment method is the preferred option.
When you mix the installation of Win32 apps and line-of-business (LOB) apps during Windows Autopilot enrollment, app installation may fail. This happens because both app types might attempt to use the Trusted Installer service simultaneously, which is not possible, leading to installation failures.
To avoid this issue, you can use the Autopilot device preparation method. This approach allows you to mix Win32 and LOB apps during enrollment without any conflicts or installation errors.
Contents
Win32 App Deployment Process
To use the Intune Win32 app deployment method for application deployment, the application must first be repackaged into a .intunewin file. For example, if you want to deploy an application and have its installer in .exe format, you can use the Intune Content Prep Tool. This tool converts the application source installer files into a .intunewin file format.
The example above is a simple version of creating a .intunewin file using a single .exe file in a folder. However, the same process can be used if your application includes multiple support files or scripts. Place all the necessary setup files in a single folder and provide the folder’s location to the Intune Content Prep Tool. The tool will package everything into a .intunewin file, ready for deployment. The process will become clearer as I demonstrate it step-by-step in the next section.
Find Silent Install/Uninstall Switches for the App
Most apps can be managed through the command line. Check the app’s documentation for Install and Uninstall switches, which might be in the Installation or User Manual. If you are deploying an .exe application, first find out the silent parameters for the app.
If we take an example of an application called Notepad ++, Its silent switches can be found in Notepad++ Online User Manual. Scroll down on this link to find the Installer Options section, which provides the /S switch for silent installation. Please ensure that it’s an uppercase “S,” not lowercase.
To uninstall the application, you can use the Uninstall.exe file located in the installation folder and add the /S switch for a silent uninstallation.
Notepad ++ Silent Install Command
npp.8.4.9.Installer.x64.exe /S
Notepad ++ Silent Uninstall Command
C:\Program Files\Notepad++\uninstall.exe” /S
The Win32 app deployment method is not limited to deploying .exe applications. It can also be used for for complex application installations and advanced deployment scenarios that may require PowerShell scripts before or after the installation.
For example, you can place all application source files in a single folder and create a PowerShell script in the same folder to invoke the setup file, create environment variables, or update configuration files as needed. When you create a Win32 app deployment on Intune, Provide this PowerShell script as Install command.
Test Silent Install/Uninstall Switches Manually on a Device
It’s a best practice first to try installing and uninstalling the application on a couple of devices manually. This lets you confirm that the installation and uninstallation commands are functioning correctly.
1. Test Silent Install of EXE App
Here’s how to test the installation of an application manually on a Windows device:
- Open Command Prompt as an administrator.
- Navigate to the folder with the Notepad++ exe installer file (e.g., npp.8.4.9.Installer.x64.exe).
- Execute the .exe file with the “/S” switch for silent installation (ensure “S” is in uppercase).
- The installation will be completed silently without any prompts.
- To verify the installation, click Start > Run > Type appwiz.cpl and press Enter. Check to confirm that the application has been installed successfully.
2. Test Silent Uninstall of EXE App
To test the silent uninstallation of Notepad++:
- Open an elevated Command Prompt.
- Run the following command: “C:\Program Files\Notepad++\uninstall.exe” /S.
- The uninstallation process should proceed silently without any user prompts.
- Check your Start menu or program list to see if the application has been uninstalled.
If the uninstallation is successful without any prompts, you have verified that the silent uninstall works correctly.
Once you’ve confirmed that both the installation and uninstallation switches work correctly, you can create a deployment of the .exe file (app) from the Intune admin center.
Create an IntuneWin file
As discussed earlier, the Win32 app deployment method requires the application to be in .intunewin file format. To prepare this, gather all application setup files, including any support files or scripts, and place them in a single, isolated folder. Ensure that no other files apart from application support files exists in this folder.
Next, use the Intune Content Prep Tool and provide the folder’s location to repackage it into a .intunewin file. I haven’t included the steps here, as I’ve already written a dedicated blog post with detailed instructions: How to Create an IntuneWin File. In the next section, we will explore how to deploy the .intunewin file using the Win32 app deployment method.
Create Win32 app deployment on Intune
Once you have created .intunewin file, you can deploy it using Win32 app deployment method from Intune admin center. I would be taking an example of Notepad ++ app, but this process can be used to deploy any other Windows application. Let’s check the steps:
- Sign in to the Intune admin center > Apps > All Apps.
- Click on + Add and Select Windows app (Win32) from the app type.
- App Information: Click on Select app package file and browse the Intunewin file. Provide Information in the mandatory fields below. The rest of the fields are optional but useful for application documentation and troubleshooting issues.
- Program:
- Install command: npp.8.4.9.Installer.x64.exe /S
- Uninstall command: C:\Program Files\Notepad++\uninstall.exe” /S
- Install behavior: System
- Device restart behavior: No specific Action
- Requirements: You can specify the requirements that devices must meet to deploy the app. If your devices mix 32-bit and 64-bit types, check the boxes for 32-bit and 64-bit in the Operating system architecture drop-down. Else, go with 64-bit.
- Operating System Architecture: 64-bit
- Minimum operating system: Select the minimum OS requirement for this deployment.
- Detection Rules: Select Manually configure detection rules and click on +Add to add a detection rule.
- Rule Type: File
- Path: C:\Program Files\Notepad++
- File or folder: Notepad++.exe
- Detection method: File or folder exists.
- Associated with 32-bit app on 64-bit clients: No
- Assignments: Click on Add group to add an Entra security group containing users or devices. You can also click on Add all users or Add all devices.
- Review + create: Review the deployment and click on Create to start the deployment process.
Monitoring App Deployment Progress
You can follow the below steps to monitor the installation:
From the Intune admin center > Apps > All apps. Click on the deployment and check the Overview page to show the deployment status.
Sync Intune Policies
The device check-in process might not begin immediately. If you’re testing this policy on a test device, you can manually kickstart Intune sync from the device itself or remotely through the Intune admin center.
Alternatively, you can use PowerShell to force the Intune sync on Windows devices. Restarting the device is another way to trigger the Intune device check-in process.
Verify App Installation using appwiz.cpl
Once the application has been installed on the target devices, you can log in to one of the user’s devices and follow these steps to ensure the application is installed.
- Press Win + R to open Run dialog box.
- Type appwiz.cpl to open Programs and Features.
- Check the app in the list of applications to confirm if it has been installed successfully.
That’s it! We’ve successfully deployed an application using Intune. In the following section, we will learn how to uninstall .exe apps using Intune.
How to Uninstall Win32 Apps using Intune
Now that we understand how to deploy Win32 based applications using Intune, what if you want to uninstall such applications using Intune?
Let’s consider the example of the Notepad++ app, which we deployed by creating a Windows app (Win32) package from the Intune admin center. To uninstall this app, we will use the same Win32 app deployment. Here are the steps to uninstall it:
- From the Intune admin center > Apps > All apps.
- Search for the app Notepad ++ 8.4.9 and click on it.
- Go to Properties under Manage.
- Click on Edit next to Assignments.
- Remove the devices from the Required section and Add them to the Uninstall section to Uninstall Notepad ++ 8.4.9.
When you add devices in the Uninstall section of the Assignments tab, the uninstall command provided in the Program tab of the application will be executed on the target devices.
Frequently Asked Questions (FAQs)
1. How do I find Silent Install or Uninstall switches for any .exe?
Check the application’s installation or user manual for the executable file to find the Silent Install and Uninstall switches. This information is often also available on the application vendor’s website.
If you can’t find the information there, consider contacting the vendor or a third-party source from which you obtained the application to obtain this essential information.
Specific .exe files offer built-in help via the command prompt. You can typically access this help by running the executable followed by switches like /? /h or /help.
For example, a command like FoxitPDFReader121_enu_Setup_Prom.exe /help can display a pop-up box containing information about the available switches that can be used with the command. This can be a useful way to discover command-line options for specific applications.
2. Can I use the same method to package a .MSI file as I did for .exe files?
Using the Line-of-business apps method for MSI files is better and easier, but you can also use the Win32 app method if your deployment is more complex. You can refer to this post for more Info: Deploy MSI using Intune Win32 App deployment
3. I deployed a Win32 app to the device using Intune, but it didn’t install.
If you’ve followed the steps to create a Windows app (Win32) deployment as outlined in the blog post and the app isn’t appearing on end-user devices, you can try the following troubleshooting steps:
- If you recently created the deployment and assigned the app to the target device, please allow some time for the application to download and install. The process may take a few hours to complete. You can speed up the process by manually initiating a device check-in.
- Check the logs on one of the target devices to gather more information about this deployment. The Intune Management Extension logs are located at C:\ ProgramData\Microsoft\IntuneManagementExtension\Logs. Open the most recent IntuneManagementExtension.log file and check the Issues.
