Microsoft Intune App Wrapping Tool For Macos
Intune App Wrapping Tool For Mac
Intune App Wrapping Tool Online
Intune App Wrapping Tool
Intune App Wrapping Tool Windows 10

The Intune Windows App (.IntuneWin – “Remote Desktop Connection Manager.intunewin”) created in the above section. Now, you can upload the InutneWin packages to Intune and deploy this bundled app as Intune Windows Apps. Intune Windows App model is similar to SCCM application model. But, Intune app model is a subset of SCCM app model from a. May 28, 2015 Android App Protection Policies Application Management Intune Intune App Wrapper Tool How to wrap Android Line of Business apps with Intune App Wrapping Tool Microsoft recently released the Microsoft Intune App Wrapping Tool for Android that allows you to take your Line of Business (LOB) apps and make them managed. Microsoft recently released the Microsoft Intune App Wrapping Tool for Android that allows you to take your Line of Business (LOB) apps and make them managed. By making an app managed, you add an extra layer of restrictions around the app to restrict operations like cut, copy and paste or open web links in a managed browser. Intune app wrapping tool for 64-bit apps and macOS Catalina With the release of macOS Catalina in October, Apple now supports only 64-bit binaries on macOS 10.15 and beyond. To continue to support customers preparing macOS line-of-business applications for deployment using Intune, the app wrapping tool (v1.2) on GitHub now supports the macOS 10.

14 Sep 2019

Win32 application deployments using Microsoft Intune continues to improve, with application dependencies now available and script based requirement capabilities, Intune provides a comprehensive cloud based application deployment solution hot on the heels of it’s big brother Configuration Manager.

One feature that does not have parity with SCCM, is the option to allow users to interact with a installation prompts during deployment.There has been some great community developed tools like the PSAppDeployToolkit which can provide end users with company branded dialogue boxes, creating a more personable deployment experience.

Of course, we can use the PSAppDeployToolkit with Intune on it’s own today, utilising it’s superior logging and PowerShell based installation cmdlets to silently install .msi or .exe applications. But as Win32 applications are installed from within the system (session 0) context, we are unable to benefit from the user driven dialogue boxes.

It is common for applications to have dependencies that need to be closed during installation. And as Administrators we need to make sure that the application installs successfully, and within a timely manner. But also need to make sure that to achieve these objectives, that we don’t do so at the users expense.

As Administrators we can be force close dependent applications prior to installation, using some crude stop-process commands coupled with a force parameter. But without the ability to set maintenance Windows within Intune, or being able to specify installation to take place outside of Active Hours, we’re going to get some very unhappy end users as applications close without the opportunity to defer installation to a time that suits them better.

The Problem to Solve?

How can we provide end users whose devices are managed with Microsoft Intune (Standalone) with a better installation experience, for high user applications while not relying on them to self serve application updates using the Company Portal?

The Solution

Using a combination of PowerShell, PSAppDeployToolkit and a tool borrowed from MDT called ServiceUI - we can provide a user friendly deployment experience from a Win32 Intune required application assignment, like the one I demonstrate in this video:

Prerequisites:

Microsoft 365 (any SKU), EMS E3 or Intune Device Licensing
The PSAppDeployToolkit downloaded from Github
ServiceUI.exe, borrowed from Microsoft Deployment Toolkit (MDT)
Microsoft Win32 Content Prep Tool from Github

For those unfamiliar with some of components listed in the prerequisites, here’s a brief overview:

ServiceUI.exe

ServiceUI.exe is a tool included as part of MDT, it allows us to to launch applications from within the system context, into the context of an active console user. This allows end users to interact with individual applications running as system, rather than being elevated themselves. The tool can be found in the Toolsx64 directory of a deployment share.

PSAppDeployToolkit

The PSAppDeploymentToolkit website describe their toolkit as:

“The PowerShell App Deployment Toolkit provides a set of functions to perform common application deployment tasks and to interact with the user during a deployment. It simplifies the complex scripting challenges of deploying applications in the enterprise, provides a consistent deployment experience and improves installation success rates.The toolkit functions as a wrapper”

Definitely check out the website to find a full list of features and capabilities.

Microsoft Win32 Content Prep Tool

The content prep tool allows Intune Administrators to wrap install files for Win32 Applications, and use silent install switches or custom install scripts to install the wrapped application.

Solution Breakdown

Intune runs the the Configure.ps1 PowerShell Script (shown below)
PowerShell uses WMI to check to see if any users are running the target process
If the process is not detected, PSAppDeployToolkit is run in noninteractive mode, and the installation/upgrade takes place unknowingly to the user
If the process is detected, PSAppDeployToolkit is launched in interactive mode within the users console session based on the user running explorer.exe using ServiceUI, prompting the user to close the required applications before starting the installation
If the user chooses to defer the installation, exit code 60012 is returned to Intune - and a failure is recorded.

Retry vs Failure

Why return a failure to Intune rather a retry? The retry time on a Win32 application is only 5 minutes, which is not a long enough delay before prompting the user who just dismissed the prompt to try the installation again. If a failure is returned, Intune will wait at least 24 hours before retrying in the installation again.

Ipos 4.0.3.7 keygen. Configure.ps1

Here is an example of a PowerShell script that can be used to detect the target process is in use, and launch PSADT in either interactive, or non-interactive mode accordingly:

Wrapping It All Together

Here’s the directory to wrap using the Win32 Content Prep Tool with the three components:

Configure.ps1 PowerShell Script
PSAppDeployToolkit, customised for my application
ServiceUI, borrowed from MDT

Intune Install Command:

The install command used in Intune, is (a reminder that PowerShell scripts launched via Win32 are started in x86, rather x64).

For extra points, you can add some switching logic in your configure script and pass a parameter that tells the script whether to launch PSADT in Install or Un-Install mode.

Microsoft Intune App Wrapping Tool For Macos

Summary

This solution is not a new one, previously used by SCCM administrators prior to 1802, but I’ve yet to see it used with Intune. It has a couple of moving parts, but is relatively simple once you wrap your head around the components.

Recently, I utilised this deployment method with 3 separate customers, upgrading a critical database client application used by 75% of all end users, and within a 24 hour period - we were on track for 80% upgrade success. And most importantly, across 600 client machines, we received about 3 support calls.

The previous upgrade method for these customers would have been either a manual per user upgrade, or a deploying the upgrade via Group Policy, which depended on the user being on-site at start up time.

Hopefully this provides some inspiration into what is possible with Win32 App Deployment through Intune. If you’d like more details, ask me a question in the comments or send me a tweet on twitter.

Previous Chats

Please enable JavaScript to view the comments powered by Disqus.

-->

Use the Microsoft Intune App