Intune Update Scenario

%3CLINGO-SUB%20id%3D%22lingo-sub-719168%22%20slang%3D%22en-US%22%3EIntune%20Update%20Scenario%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719168%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Guys%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20havent%20found%20something%20that%20helps%20me%20with%20my%20question%20so%20I%20created%20a%20new%20thread%20for%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20deploying%20a%20software%20package%20in%20intune%20you%20do%20this%20by%20using%20Active%20Directory%20groups.%20When%20deploying%20an%20update%20of%20a%20pre-existing%20app%20what%20is%20the%20best%20case%20szenario%20for%20it%3F%20I%20have%20already%20read%2C%20that%20it%20is%20recommended%20to%20edit%20the%20already%20pre-existing%20package%20and%20change%20the%20installation%20file.%20But%20what%20about%20having%20two%20ad%20groups%3F%20The%20first%20parent%20group%20is%20for%20managing%20all%20the%20end%20users%20(Example%20Group%20Name%3A%20Google%20Chrome).%20And%20then%20there%20is%20another%20child%20ad%20group%20which%20is%20the%20installation%20group%20of%20the%20current%20version%20(Google%20Chrome%20Version%201.2.3)%3F%20So%20if%20adding%20a%20new%20version%2C%20i%20just%20change%20the%20child%20group%2C%20so%20that%20i%20can%20keep%20all%20older%20versions%20in%20case%20of%20emergency%20Downgrades%3F%20Would%20that%20be%20a%20practicable%20way%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20help!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-719168%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-720252%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Update%20Scenario%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-720252%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F364308%22%20target%3D%22_blank%22%3E%40jenstf%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHey%20thanks%20for%20your%20fast%20reply.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20in%20my%20case%20it%20isnt%20a%20MSI%20we%20use%20a%20Powershell-Wrapper%2C%20that%20is%20packed%20into%20a%20intunewin-file.%20With%20that%20way%2C%20downgrading%20should%20be%20still%20possible%20I%20guess%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20if%20I%20replace%20the%20MSI%20(or%20in%20my%20case%20the%20intunewin-file)%20intune%20will%20start%20a%20(re)installation%20on%20every%20client%2C%20even%20though%20it%20is%20already%20installed%20on%20that%20client%20with%20a%20different%20version%3F%20Or%20does%20intune%20still%20compares%20the%20detection%20rule%20if%20the%20app%20is%20already%20installed%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-721693%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Update%20Scenario%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-721693%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F364308%22%20target%3D%22_blank%22%3E%40jenstf%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOkay%20thats%20also%20an%20interesting%20point%3B%20My%20Wrapper%20writes%20a%20Branding%20with%20the%20Softwareversion%20into%20the%20registry.%20Actually%20I%20only%20check%2C%20if%20the%20Branding%20exists%2C%20but%20due%20to%20your%20information%20I%20will%20compare%20the%20Version-Key.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20still%20dont%20me%20make%20happy%20is%20that%20intune%20doesnt%20removes%20the%20old%20version.%20If%20you%20have%20a%20MSI%20this%20will%20probably%20be%20no%20problem%20as%20it%20checks%20the%20Upgradecode.%20But%20if%20you%20have%20an%20EXE-File%2C%20then%20you%20could%20get%20trouble%20when%20the%20software%20doesnt%20detects%2C%20that%20theres%20already%20a%20preversion%20installed%20-%20which%20could%20end%20in%20having%20two%20different%20Versions%20on%20that%20client.%20Still%20trying%20to%20find%20a%20solution%20for%20that...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20choose%20the%20way%2C%20to%20create%20an%20app%20for%20each%20version%2C%20then%20I%20could%20assign%20the%20uninstallation%20of%20the%20preversion%20to%20the%20current%20version.%20But%20is%20there%20a%20chance%20to%20create%20a%20installation%20order%3F%20So%20that%20first%20of%20all%20the%20uninstallation%20assignment%20will%20be%20executed%20and%20then%20after%20it%20the%20installation%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-723296%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Update%20Scenario%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-723296%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F366035%22%20target%3D%22_blank%22%3E%40sebamedo%3C%2FA%3E%26nbsp%3BFor%20a%20spesific%20installation%20order%2C%20trigger%20a%20script%20as%20the%20installation%20executable%20or%20as%20a%20custom%20detection%20rule%20to%20clean%20up%20the%20old%20version%20before%20triggering%20the%20new%20install.%3CBR%20%2F%3E%3CBR%20%2F%3E-%20Jens%20Tore%20Fremmegaard%20-%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmodernworkplace.fremmegaard.no%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmodernworkplace.fremmegaard.no%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719178%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Update%20Scenario%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719178%22%20slang%3D%22en-US%22%3E%3CP%3ETo%20upgrade%20a%20LOB%20App%20in%20intune%2C%20just%20replace%20the%20msi%20with%20a%20newer%20version.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENo%20need%20to%20make%20groups%20for%20different%20versions%20as%20Intune%20only%20supports%20upgrading%2C%20not%20downgrading.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20only%20reason%20to%20publish%20different%20versions%20would%20be%20for%20a%20pilot%20group%20or%20for%20users%20that%20require%20a%20spesific%20version.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E-%20Jens%20Tore%20Fremmegaard%20-%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmodernworkplace.fremmegaard.no%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmodernworkplace.fremmegaard.no%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-721488%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Update%20Scenario%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-721488%22%20slang%3D%22en-US%22%3E%3CP%3EI%20belive%20you%20have%20to%20update%20your%20detection%20rule%20to%20something%20version%20spesific%20to%20trigger%20a%20new%20install%20as%20the%20detection%20rule%20is%20one%20of%20the%20first%20actions%20that's%20triggered%20during%20Win32%20deployment.%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20can%20try%20adetection%20rule%20with%20type%20File%20with%20detection%20method%20String(version)%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E-%20Jens%20Tore%20Fremmegaard%20-%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmodernworkplace.fremmegaard.no%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmodernworkplace.fremmegaard.no%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
sebamedo
New Contributor

Hi Guys,

 

I havent found something that helps me with my question so I created a new thread for this.

 

When deploying a software package in intune you do this by using Active Directory groups. When deploying an update of a pre-existing app what is the best case szenario for it? I have already read, that it is recommended to edit the already pre-existing package and change the installation file. But what about having two ad groups? The first parent group is for managing all the end users (Example Group Name: Google Chrome). And then there is another child ad group which is the installation group of the current version (Google Chrome Version 1.2.3)? So if adding a new version, i just change the child group, so that i can keep all older versions in case of emergency Downgrades? Would that be a practicable way?

 

Thanks for your help!

5 Replies

To upgrade a LOB App in intune, just replace the msi with a newer version.

 

No need to make groups for different versions as Intune only supports upgrading, not downgrading.

 

The only reason to publish different versions would be for a pilot group or for users that require a spesific version.


- Jens Tore Fremmegaard -
https://modernworkplace.fremmegaard.no

@jenstf 

 

Hey thanks for your fast reply.

 

So in my case it isnt a MSI we use a Powershell-Wrapper, that is packed into a intunewin-file. With that way, downgrading should be still possible I guess?

 

So if I replace the MSI (or in my case the intunewin-file) intune will start a (re)installation on every client, even though it is already installed on that client with a different version? Or does intune still compares the detection rule if the app is already installed?

I belive you have to update your detection rule to something version spesific to trigger a new install as the detection rule is one of the first actions that's triggered during Win32 deployment.

You can try adetection rule with type File with detection method String(version)


- Jens Tore Fremmegaard -
https://modernworkplace.fremmegaard.no

@jenstf 

Okay thats also an interesting point; My Wrapper writes a Branding with the Softwareversion into the registry. Actually I only check, if the Branding exists, but due to your information I will compare the Version-Key.

 

What still dont me make happy is that intune doesnt removes the old version. If you have a MSI this will probably be no problem as it checks the Upgradecode. But if you have an EXE-File, then you could get trouble when the software doesnt detects, that theres already a preversion installed - which could end in having two different Versions on that client. Still trying to find a solution for that...

 

If I choose the way, to create an app for each version, then I could assign the uninstallation of the preversion to the current version. But is there a chance to create a installation order? So that first of all the uninstallation assignment will be executed and then after it the installation?

@sebamedo For a spesific installation order, trigger a script as the installation executable or as a custom detection rule to clean up the old version before triggering the new install.

- Jens Tore Fremmegaard -
https://modernworkplace.fremmegaard.no

Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
36 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies