By: Arnab Biswas | Product Manager - Microsoft Intune
Updated 10/26/22: Refresh content in line with recent updates to Intune. The scenario described in this document is no longer supported, as discussed in What’s new in Microsoft Intune. We now support direct uploading of .pkg app types into Intune. Refer to How to add macOS line-of-business (LOB) to Microsoft Intune for more information about uploading .pkg app types.
Updated 03/08/22: You can now upload and deploy DMG-type applications to managed macOS devices from Microsoft Endpoint Manager using the required assignment type. DMG is the file extension for Apple disk image files. For more information, see Add a macOS DMG app to Microsoft Intune.
You can use Microsoft Intune to deploy the most common app types supported by macOS such as .pkg, .dmg, or .app. Natively, Mac MDM only supports installing signed .pkg-type applications. Therefore, apps that are of non-pkg types requires admins to run commands on macOS either manually or as a script that can be distributed using Intune. The rest of the document outlines the recommended app preparation steps. These steps have been tested on macOS 10.15.
The steps below require that you start with a DMG or APP app that satisfies the conditions above.
hdiutil attach appname.dmg
mkdir ./TargetDirectory
cd ./TargetDirectory
pkgbuild --install-location /Applications --component /Volumes/path_to_app/app_to_convert.app ./TargetDirectory/intermediate.pkg
productbuild --synthesize --package /TargetDirectory/intermediate.pkg /TargetDirectory/distribution.xml
productbuild --distribution ./distribution.xml --package-path ./intermediate.pkg ./unsigned_final.pkg
productsign --sign “3rd Party Mac Developer Installer: Developer Name (XXXX)” ./unsigned_final.pkg ./signed_final.pkg
hdiutil detach /Volumes/appname
./IntuneAppUtil -c signed_final.pkg -o /finalpath
This sample script demonstrates how the above steps can convert a DMG file to INTUNEMAC.
Let us know by responding to this post if you have any questions or feedback! You can also ask questions by tagging @IntuneSuppTeam out on Twitter where our Support as a Feature team helps answer quick questions.
Post updates:
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.