Intune Win32 apps 11 min read

Intune Win32 Packaging That Reports the Truth

Reliable packaging is a contract between installer, detection rule, and user experience. Each part must describe the same application state.

Prepare the source

Keep the source directory deterministic and exclude build artifacts, logs, and unrelated installers. Use the Microsoft Win32 Content Prep Tool to create a single package, then record the source version alongside the application revision.

Make detection version-aware

Use a registry or file version rule that matches the product’s real install location. A rule that only checks existence can report success after a partial or obsolete install.

IntuneWinAppUtil.exe -c .\Source -s .\Install.ps1 -o .\Output
# Install command: powershell.exe -ExecutionPolicy Bypass -File .\Install.ps1

Control requirements and recovery

Set architecture and minimum operating system requirements before assignment. Map vendor exit codes deliberately, and use dependencies for prerequisites rather than hiding them inside a long install script.

Operational checklist

  • Version the source and detection rule together.
  • Test install, upgrade, uninstall, and retry.
  • Declare requirements before broad assignment.
  • Document reboot and user notification behavior.

Read more

Technical Discussion & Q&A

Secure PostgreSQL Board

Join the Engineering Discussion

Loading discussion threads...

Akash Nagapure

Akash Nagapure

Microsoft Intune and VMware Architect

Microsoft Intune and VMware Architect specialized in designing scalable cloud infrastructure and zero-trust modern workspace solutions.

Enterprise Homelab
Sponsored

Enterprise Lab Blueprints Pro

Accelerate your cloud architecture transitions with ready-to-deploy Intune policies, configuration baselines, and automated scripts.

Was this guide helpful?

Loading community feedback...

extend: { fontFamily: { sans: ["'Plus Jakarta Sans'", "ui-sans-serif", "system-ui", "sans-serif"], mono: ["'JetBrains Mono'", "ui-monospace", "SFMono-Regular", "monospace"], } } } }
Intune Win32 apps 11 min read

Intune Win32 Packaging That Reports the Truth

Reliable packaging is a contract between installer, detection rule, and user experience. Each part must describe the same application state.

Prepare the source

Keep the source directory deterministic and exclude build artifacts, logs, and unrelated installers. Use the Microsoft Win32 Content Prep Tool to create a single package, then record the source version alongside the application revision.

Make detection version-aware

Use a registry or file version rule that matches the product’s real install location. A rule that only checks existence can report success after a partial or obsolete install.

IntuneWinAppUtil.exe -c .\Source -s .\Install.ps1 -o .\Output
# Install command: powershell.exe -ExecutionPolicy Bypass -File .\Install.ps1

Control requirements and recovery

Set architecture and minimum operating system requirements before assignment. Map vendor exit codes deliberately, and use dependencies for prerequisites rather than hiding them inside a long install script.

Operational checklist

  • Version the source and detection rule together.
  • Test install, upgrade, uninstall, and retry.
  • Declare requirements before broad assignment.
  • Document reboot and user notification behavior.

Read more

Technical Discussion & Q&A

Secure PostgreSQL Board

Join the Engineering Discussion

Loading discussion threads...

Akash Nagapure

Akash Nagapure

Microsoft Intune and VMware Architect

Microsoft Intune and VMware Architect specialized in designing scalable cloud infrastructure and zero-trust modern workspace solutions.

Enterprise Homelab
Sponsored

Enterprise Lab Blueprints Pro

Accelerate your cloud architecture transitions with ready-to-deploy Intune policies, configuration baselines, and automated scripts.

Was this guide helpful?

Loading community feedback...