Skip to content
Andy Kemp Consulting

AKC AppDeploy#

Package, configure, test and upload Win32 apps for Intune from one Windows app, signed in with a least-privilege account. No IntuneWinAppUtil, no admin centre forms, no Global Administrator.

Watch the demo Try the live demo Download

AppDeploy is in beta. The live demo is a simulation of the Windows app with a made-up tenant: packaging and uploading need Windows and your tenant, so it can't run in a browser. See What's new for the latest changes.

What it does#

Getting a Win32 app into Intune normally means the Microsoft packager on the command line, then a long form in the admin centre, then hunting for silent switches, an uninstall command and a detection rule. AppDeploy does all of it in seven steps, with every value shown before anything is sent:

1. Package       Choose an MSI, an EXE or a folder; AppDeploy builds and checks the .intunewin
        ↓
2. Install       Recognises the installer, suggests silent switches; test the install on this PC
        ↓
3. Detection     MSI product code, file, registry or script, suggested from the local test
        ↓
4. Requirements  Processor, minimum Windows, disk space and memory
        ↓
5. Listing       Company Portal name, version, category, featured, links and the logo
        ↓
6. Assign        Search for groups; Required, Available or Uninstall, with deadlines
        ↓
7. Review        Every value that will be sent, then upload, commit and assign

Key features#

  • Its own packager: builds .intunewin files natively, in the same format as Microsoft's IntuneWinAppUtil, and checks each one decrypts before you upload it
  • Installer recognition: MSI, WiX Burn, Inno Setup, NSIS, Advanced Installer, InstallShield and Squirrel, from the file itself, with silent switches and a confidence level
  • Local test run: installs on this PC (or a VM), reads what Windows recorded, and suggests the uninstall command and detection; then tests the uninstall
  • Company Portal listing: the logo from the installer's own icon, your tenant's categories, featured, version, links
  • Assignments: type-to-search groups, All users, All devices, exclusions, notifications and deadlines
  • Least privilege: day to day it needs Intune's Application Manager role, and nothing else; AppDeploy itself never runs as administrator
  • Your tenant, not ours: it creates its own app registration in your tenant, so nothing depends on Andy Kemp Consulting
  • Projects: save every setting, then package the next version with the same settings
  • Updates itself from downloads.andykemp.com, checked against a published SHA-256

Where to start#

  1. Before you start: what you need, and setting up your tenant once.
  2. Quick start: Notepad++ from download to Company Portal.
  3. Using AppDeploy: every step in detail.