How Intune deploys Windows applications

Overview Deploying a Windows app with Intune looks like a single button click in the admin center, but underneath it is a staged pipeline: you upload a package with deployment metadata, you assign it to users or devices, the device checks in for policy, and a client-side agent does the actual download, evaluation, installation, and … Read more

Intune Management Extension explained

Overview The Intune Management Extension (IME) is the Windows client agent that turns a Win32 app or PowerShell-script policy in the cloud into an actual install on the device. It is the component that downloads content, checks whether a device qualifies for an app, runs the install or uninstall command, decides whether the app is … Read more

System vs User context in Intune

Overview Every Win32 app you deploy with Intune runs its install command in one of two security contexts: System or User. This single setting, called Install behavior on the Program tab, decides which account the installer and detection logic execute under, and it is one of the most common reasons a package that installs perfectly … Read more

How to prepare .intunewin packages

Overview A .intunewin file is the only package format Microsoft Intune accepts for Win32 (line-of-business desktop) apps. You produce one by feeding an installer and any supporting files through the Microsoft Win32 Content Prep Tool (IntuneWinAppUtil.exe), which compresses and encrypts the whole folder into a single, uploadable payload. Without this wrapping step there is no … Read more

IntuneWinAppUtil tool explained

Overview The Microsoft Win32 Content Prep Tool, run as IntuneWinAppUtil.exe, is the utility that wraps a Windows installer and its supporting files into the .intunewin format that Intune requires for Win32 app deployment. Without this step, Intune has nothing to upload: the portal only accepts the .intunewin container, not a raw .exe or .msi sitting … Read more

Silent install switches for common installers

Overview A silent (or unattended) install switch is the command-line argument that tells an installer to run without showing a window, asking questions, or waiting for a click. Microsoft Intune deploys Win32 apps non-interactively, usually in the local SYSTEM context with no interactive desktop, so any installer that pauses for user input will stall, time … Read more

Best practices for packaging Win32 apps

Overview Packaging is where most Win32 app problems are created or prevented. A clean, predictable package installs the same way on the first device and the ten-thousandth, reports its status honestly, and can be diagnosed in minutes instead of hours. The opposite — a cluttered source folder, an install command that prompts, or a detection … Read more

Deploy Zulu JRE 8 (LTS) (x64) with Intune

Overview This guide covers deploying Zulu JRE 8 (LTS) (x64) as a Windows app (Win32) in Microsoft Intune, including packaging, configuration, detection rules, assignments, and troubleshooting. App name Zulu JRE 8 (LTS) (x64) Publisher Azul Systems, Inc. Version 8.94.0.17 App type Windows app (Win32) Install behavior System Download Installer Installer file zulu8.94.0.17-ca-jre8.0.492-win_x64.msi Download source https://cdn.azul.com/zulu/bin/zulu8.94.0.17-ca-jre8.0.492-win_x64.msi … Read more