Deploy MSI / LOB App as Admin

%3CLINGO-SUB%20id%3D%22lingo-sub-1248080%22%20slang%3D%22en-US%22%3EDeploy%20MSI%20%2F%20LOB%20App%20as%20Admin%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1248080%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20ideas%20on%20how%20to%20deploy%20an%20MSI%26nbsp%3B%20via%20Intune%20that%20requires%20Admin%20rights%20to%20install%20on%20systems%20where%20the%20users%20are%20Standard%20Users%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EInfo%20appreciated%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1248080%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1249382%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20MSI%20%2F%20LOB%20App%20as%20Admin%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1249382%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131657%22%20target%3D%22_blank%22%3E%40Stuart%20King%3C%2FA%3E%26nbsp%3BIntune%20deployed%20Win32%20apps%20are%20installed%20using%20the%20SYSTEM%20account%20which%20should%20be%20privileged%20enough%20to%20install.%26nbsp%3B%20If%20you%20are%20getting%20an%20MSI%20error%2C%20you%20could%20share%20it%20here%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1250204%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20MSI%20%2F%20LOB%20App%20as%20Admin%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1250204%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131657%22%20target%3D%22_blank%22%3E%40Stuart%20King%3C%2FA%3E%26nbsp%3BIndeed%20using%20Win32%20app%20that%20should%20be%20possible.%3CBR%20%2F%3EMore%20on%20that%20can%20be%20found%20here%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FMicrosoft%2FMicrosoft-Win32-Content-Prep-Tool%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FMicrosoft%2FMicrosoft-Win32-Content-Prep-Tool%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1252036%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20MSI%20%2F%20LOB%20App%20as%20Admin%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1252036%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F131657%22%20target%3D%22_blank%22%3E%40Stuart%20King%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eactually%20this%20is%20the%20standard%20scenario%20for%20most%20enterprises.%20Deploy%20your%20MSI%20LOB%20app%20as%20an%20Win32%20app%20in%20Intune%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22Win32Intune.png%22%20style%3D%22width%3A%20416px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F179360i4D6A0E4001EC5A6B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Win32Intune.png%22%20alt%3D%22Win32Intune.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EYou%20need%20to%20wrap%20it%20as%20an%20.intunewin%20(%3C%2FSPAN%3E%3CA%20style%3D%22font-family%3A%20inherit%3B%20background-color%3A%20%23ffffff%3B%22%20href%3D%22https%3A%2F%2Fgithub.com%2Fmicrosoft%2FMicrosoft-Win32-Content-Prep-Tool%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2Fmicrosoft%2FMicrosoft-Win32-Content-Prep-Tool%3C%2FA%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3E)%20and%20then%20deploy%20it%20with%20the%20setting%20Install%20behavior%3A%20%3CSTRONG%3ESystem%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22InstallBehaviorIntuine.png%22%20style%3D%22width%3A%20420px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F179361i1130D1BE06E3BBC1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22InstallBehaviorIntuine.png%22%20alt%3D%22InstallBehaviorIntuine.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20have%20to%20use%20the%20silent%20install%20parameters%20for%20the%20installer.%20This%20depends%20on%20the%20individual%20setup%20you%20are%20using%2C%20setup.exe%20have%20often%20individual%20ones%20like%20%2Fsilent%20%2Fquiet%20etc.%20msi%20should%20be%20more%20standardized%20and%20the%20content%20prep%20tool%20should%20you%20support%20there%20and%20generate%20command%20lines%20like%3A%26nbsp%3B%3CSPAN%3Emsiexec%20%2Fi%20%22Notepad%2B%2B7.6.6.msi%22%20%2Fq%20for%20silent%20install.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EThe%20MS%20documentation%20is%20here%3A%26nbsp%3B%3CBR%20%2F%3E%3CSTRONG%3EIntune%20Standalone%20-%20Win32%20app%20management%3CBR%20%2F%3E%3C%2FSTRONG%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fapps%2Fapps-win32-app-management%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fapps%2Fapps-win32-app-management%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3Ebest%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EOliver%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Regular Contributor

Hi All

 

Any ideas on how to deploy an MSI  via Intune that requires Admin rights to install on systems where the users are Standard Users?

 

Info appreciated

3 Replies

@Stuart King Intune deployed Win32 apps are installed using the SYSTEM account which should be privileged enough to install.  If you are getting an MSI error, you could share it here?

@Stuart King Indeed using Win32 app that should be possible.
More on that can be found here https://github.com/Microsoft/Microsoft-Win32-Content-Prep-Tool

Hey @Stuart King,

 

actually this is the standard scenario for most enterprises. Deploy your MSI LOB app as an Win32 app in Intune:

 

Win32Intune.png

 

You need to wrap it as an .intunewin (https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool) and then deploy it with the setting Install behavior: System

 

InstallBehaviorIntuine.png

 

You have to use the silent install parameters for the installer. This depends on the individual setup you are using, setup.exe have often individual ones like /silent /quiet etc. msi should be more standardized and the content prep tool should you support there and generate command lines like: msiexec /i "Notepad++7.6.6.msi" /q for silent install.

 

The MS documentation is here: 
Intune Standalone - Win32 app management
https://docs.microsoft.com/en-us/mem/intune/apps/apps-win32-app-management

 

best,

Oliver