A Complete Guide to Deploying Win32 Applications via Microsoft Intune

About Microsoft Intune

Microsoft Intune, a pivotal cloud-based service for mobile device management (MDM) and mobile application management (MAM), plays an essential role in the dynamic landscape of enterprise mobility and security.

Part of Microsoft's Enterprise Mobility + Security (EMS) suite, it enables organizations to manage both the devices employees use to access company data and the applications they use in their day-to-day work. It integrates seamlessly with Azure Active Directory and Azure Information Protection, offering a holistic approach to device, application, and data management.

Intune's capabilities extend to managing a variety of devices, including laptops, tablets, and smartphones, and it covers both company-owned devices and personal devices under Bring Your Own Device (BYOD) policies.

Application Deployment Options in Microsoft Intune

Microsoft Intune provides a range of options for deploying applications, each designed to handle different kinds of applications and deployment scenarios.

One of the primary deployment types in Intune is the Mobile Application Management (MAM) for apps designed for mobile devices. This deployment type is ideal for managing and securing company data within apps on personal or corporate-owned mobile devices, without the need for full device management.

For more traditional desktop applications, Intune can deploy Line of Business (LOB) apps. This deployment type is used primarily for applications that are not available in public app stores, allowing IT administrators to deploy custom-built or proprietary applications directly to devices.

The most versatile and comprehensive deployment type Intune offers is the Win32 app deployment. This deployment type revolutionized Intune's capabilities, extending its reach beyond mobile and simple desktop applications to more complex and legacy Win32 applications.

Now that we've covered the basics of Microsoft Intune and its application deployment options, let's move on to understanding Win32 Deployment in Intune in detail.

You can check our SCCM to Intune Migration article and find out why Intune is one of the best Microsoft SCCM Alternatives.

What Is Win32 Deployment and What Are Its Advantages

Win32 deployment is a game-changer for many organizations as it allows them to manage and deploy traditional desktop applications within a modern cloud-based environment. This is particularly significant for applications that require complex installation processes or scripts, which are common in enterprise settings.

The Win32 deployment type supports a variety of file formats including .exe, .msi, and .msp, and it provides advanced features like dependency management, detection rules, and return codes.

These features enable administrators to have granular control over the deployment process, ensuring that applications are installed correctly and function as intended on the user's device.

Moreover, it allows IT administrators to deploy these desktop applications in a modern management environment, even though the applications may not be built for such environments.

Originally, Intune was more focused on managing mobile devices and applications. However, the advent of the Win32 app deployment capability bridged the gap, allowing comprehensive management and deployment of both mobile and desktop applications within the same framework.

Key features include:

• Win32 deployment supports complex installation scripts, including .exe, .msi, and .msp installers. This flexibility is vital for organizations that use custom scripts or have legacy applications.
• Win32 applications can have dependencies, which means that other applications or software components can be prerequisites for installing the main application.
• Detection rules identify if an application is already installed on a device, avoiding unnecessary reinstalls and ensuring applications are installed only as needed.
• Customizable return codes in Win32 deployment allow for more precise control over the deployment process. They help in understanding the success or failure of an installation.
• Administrators can configure various aspects of the deployment, such as command-line arguments, installation behavior, and user context.

Win32 deployment in Intune represents a significant advancement in the realm of device management. It not only extends the capabilities of Intune to traditional desktop applications but also ensures a secure, scalable, and user-friendly environment for application deployment and management.
This makes it an invaluable tool for modern IT departments seeking to streamline their application deployment strategies while embracing cloud-based management solutions.

The Win32 Content Prep Tool

The Win32 Content Prep Tool is crucial for deploying Win32 applications via Microsoft Intune, converting traditional desktop applications into a format compatible with Intune’s Win32 app deployment.

It primarily converts application installation files, such as .exe or .msi files, into the .intunewin format, which is required for Intune deployment.

The tool creates a compressed encrypted package containing the installation files and any additional metadata needed for deployment.

This process not only ensures that the applications are ready for deployment through Intune but also secures the content during transit and storage, which is critical for maintaining data integrity and security.

One of the key benefits of using the Win32 Content Prep Tool is its ability to handle complex installation scenarios. Many traditional desktop applications come with a range of installation parameters, scripts, and configurations.

The Win32 Content Prep Tool allows these complexities to be encapsulated within the .intunewin package, facilitating a smooth and controlled deployment process through Intune.

The tool supports adding extra command-line arguments and installation instructions, allowing IT administrators to tailor deployments to their organization's unique requirements.
This customization is particularly beneficial for deploying applications with specific settings or configurations across various groups or departments.

Downloading the Win32 Content Prep Tool

To prepare applications for deployment through Microsoft Intune with the Win32 Content Prep Tool, start by downloading the tool. The download process is simple and involves several steps to get the tool ready for use. Here's what you need to do:

• The Win32 Content Prep Tool is available on GitHub, in Microsoft's repository. You can find it by searching for "Intune Win32 Content Prep Tool" on GitHub or through a search engine, or you can click here.
• Once you find it, click on Code and select Download Zip.
  
• After downloading the file, navigate to the download location on your computer and extract the zip file.

You are now ready to start converting your applications into the .intunewin format required for Win32 app deployment in Microsoft Intune.

Converting Applications Using the Win32 Content Prep Tool

Converting an MSI file with a PowerShell script wrapper into a .intunewin file using the Win32 Content Prep Tool involves a series of steps.

This process ensures that the MSI file, and the PowerShell scripts, are packaged correctly for deployment through Microsoft Intune.

The first step is to launch a cmd window and navigate to the folder where the Win32 Content Prep tool has been previously extracted. To find out all the available commands run:

IntuneWinAppUtil.exe -?

To create an IntuneWin conversion, run IntuneWinAppUtil.exe and you'll be prompted to select the source folder. This is where you should choose the folder containing your MSI file and the accompanying PowerShell script.

Both the MSI file and the PowerShell script must be in the same folder for the tool to package them together effectively.

Next, specify the setup file within the source folder. If you're using a PowerShell script to install the MSI file, this script is your setup file. Think of the script as the installer and the MSI file as the application you're installing.

The tool will prompt you to select the setup file – this is where you pick your PowerShell script.

After selecting the setup file, the tool will ask for the output folder. This folder is where the .intunewin file will be saved after the conversion process. You can choose any location on your computer that is convenient for you.

After you’ve entered all required details, the tool packages the MSI file and the PowerShell script into a single .intunewin file. This packaging process involves compressing the files and encrypting them, making them secure and ready for deployment.

You'll find the completed .intunewin file in the chosen output folder, ready for uploading to Microsoft Intune for deployment.

Uploading and Deploying a Win32 App in Intune

Uploading a .intunewin file to Microsoft Intune is an essential step in deploying your packaged applications to your managed devices. This process involves a few key actions within the Intune portal to ensure your application is ready for distribution.

First, you need to sign in to the Microsoft Endpoint Manager admin center. This is where you will manage all your Intune deployments.

Once logged in, navigate to the 'Apps' section, where you can manage and add new applications.

In the 'Apps' section, click on the option to add a new app. Intune offers several app types to choose from. For the `.intunewin` file, you need to select the 'Windows app (Win32)' option as this is the correct type for applications packaged using the Win32 Content Prep Tool.

Once you’ve chosen the app type, you will be prompted to upload the `.intunewin` file.

Click on the browse button and navigate to the location of your `.intunewin` file.

Select the file and upload it to the Intune portal. This process may take a few minutes, depending on the size of your file.

After uploading, enter the application's details, such as its name, description, publisher, and other relevant details. These details are important as they help identify and manage the app within Intune.

Next, configure the app settings by defining the install and uninstall commands for your application. Ensure these commands align with what you established during the .intunewin file creation to guarantee correct installation and uninstallation on devices.

For deploying applications that are wrapped with PowerShell scripts, use the following command:

powershell.exe -ExecutionPolicy Bypass -File test.ps1

Once the app settings are configured, you have to assign the app to groups within your organization. This determines who will receive the app. You can assign it to specific user groups or device groups or make it available for all users.

The final step is to review and create the application. Intune will show you a summary of your settings. Review these settings to ensure everything is correct, and then create the app.

This step finalizes the upload process, making your app ready for deployment via Intune.

This step-by-step process ensures the accurate upload of your `.intunewin` file to Microsoft Intune, facilitating the deployment of your Win32 application to your managed devices. By following these instructions, you can confidently manage the distribution of your applications within the Intune environment.

Practical Use-Cases: Ideal Scenarios for Implementing Win32 Deployment

There are many scenarios where Win32 deployment is the preferred method.

Here are some of them:

Conclusion

Deploying applications with Microsoft Intune, particularly through Win32 deployment, marks a significant advancement in IT management. The Win32 Content Prep Tool is critical, allowing for the conversion and packaging of traditional desktop applications – even those with intricate installation requirements – into a format ready for Intune distribution.

The process, from converting applications into .intunewin files with the Win32 Content Prep Tool to their deployment on the Intune platform, is both comprehensive and secure. It simplifies the deployment across various devices and ensures secure, efficient, and manageable application delivery.

Win32 app deployment in Intune addresses the challenges of managing both legacy and modern applications. It offers the flexibility and control needed to deploy applications in a variety of scenarios, from traditional office environments to remote work settings. This flexibility is key in today’s ever-evolving workplace, where the ability to rapidly and securely distribute software can significantly impact productivity and operational efficiency.

Moreover, the integration of Intune with other Microsoft services enhances its value, providing a unified and robust platform for managing all aspects of enterprise mobility and security.

Looking ahead, the role of tools like Microsoft Intune and the Win32 Content Prep Tool will undoubtedly continue to grow. They are set to play a key role in helping organizations navigate the challenges of managing a diverse and dynamic digital environment. The ability to efficiently manage and deploy applications is not just a matter of convenience but a critical component in ensuring security, compliance, and competitiveness in a digital-first world.

This in-depth look at the Win32 app deployment process in Intune highlights its importance in modern IT environments and the advantages it brings to organizations looking to optimize their application management strategies.