SOLVED

Installing .MSI and .EXE based applications as part of Autopilot

%3CLINGO-SUB%20id%3D%22lingo-sub-2356083%22%20slang%3D%22en-US%22%3EInstalling%20.MSI%20and%20.EXE%20based%20applications%20as%20part%20of%20Autopilot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2356083%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20setting%20up%20a%20POC%20for%20autopilot%20for%20my%20Azure%20AD%20joined%20devices.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELooking%20to%20deploy%20some%20applications%20which%20are%20a%20mix%20of%20.MSI%20and%20.EXE%20based%20ones.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20sure%20an%20article%20from%20Microsoft%20that%20recommends%20not%20to%20mix%20the%20above%20during%20Autopilot.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fapps%2Fapps-win32-app-management%23app-dependencies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EWin32%20app%20management%20in%20Microsoft%20Intune%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CEM%3EWhen%20you're%20deploying%20Win32%20apps%2C%20consider%20using%20the%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fapps%2Fintune-management-extension%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EIntune%20Management%20Extension%3C%2FA%3E%3C%2FEM%3E%3CSPAN%3E%3CEM%3E%26nbsp%3Bapproach%20exclusively%2C%20particularly%20when%20you%20have%20a%20multiple-file%20Win32%20app%20installer.%20If%20you%20mix%20the%20installation%20of%20Win32%20apps%20and%20line-of-business%20apps%20during%20AutoPilot%20enrollment%2C%20the%20app%20installation%20might%20fail.%20The%20Intune%20management%20extension%20is%20installed%20automatically%20when%20a%20PowerShell%20script%20or%20Win32%20app%20is%20assigned%20to%20the%20user%20or%20device%3C%2FEM%3E.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EHas%20anyone%20ran%20into%20problems%20as%20mine%20tests%20so%20far%20have%20worked.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2356083%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2356733%22%20slang%3D%22en-US%22%3ERe%3A%20Installing%20.MSI%20and%20.EXE%20based%20applications%20as%20part%20of%20Autopilot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2356733%22%20slang%3D%22en-US%22%3Eso%20far%20with%20all%20the%20deployments%20I%20have%20done...%20i%20did%20not%20run%20into%20any%20problems%20by%20mixing%20MSI%20and%20win32%20applications%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2370876%22%20slang%3D%22en-US%22%3ERe%3A%20Installing%20.MSI%20and%20.EXE%20based%20applications%20as%20part%20of%20Autopilot%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2370876%22%20slang%3D%22en-US%22%3EMixing%20MSI%20and%20Exe%20is%20of%20course%20not%20best%20practice%20and%20not%20recommended%20but%20in%20many%20cases%2C%20it%20just%20works...%20Just%20like%20it's%20not%20best%20practise%20to%20push%2Fset%20required%20all%20of%20your%20apps%20during%20the%20esp.%20We%20try%20to%20limit%20the%20amount%20of%20app%20required%20during%20the%20esp%20as%20possible.%20ALl%20other%20apps%20which%20some%20users%20need%2C%20can%20be%20installed%20manually%20from%20the%20company%20portal%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fcall4cloud.nl%2F2020%2F11%2Fthe-powershell-win32-app-express%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcall4cloud.nl%2F2020%2F11%2Fthe-powershell-win32-app-express%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Contributor

I am setting up a POC for autopilot for my Azure AD joined devices.

 

Looking to deploy some applications which are a mix of .MSI and .EXE based ones.

 

I sure an article from Microsoft that recommends not to mix the above during Autopilot.

Win32 app management in Microsoft Intune | Microsoft Docs

When you're deploying Win32 apps, consider using the Intune Management Extension approach exclusively, particularly when you have a multiple-file Win32 app installer. If you mix the installation of Win32 apps and line-of-business apps during AutoPilot enrollment, the app installation might fail. The Intune management extension is installed automatically when a PowerShell script or Win32 app is assigned to the user or device.

 

Has anyone ran into problems as mine tests so far have worked.

 

 

 

6 Replies
so far with all the deployments I have done... i did not run into any problems by mixing MSI and win32 applications
best response confirmed by Chris Yue (Contributor)
Solution

@Chris Yue 

I would really not recommend to have a mix of MSI (Line-of-business app) and EXE (Windows app (Win32)).
The OMA DM agent can starts an MSI installation and simultaneously the Intune Management Extension plugin can start a Win32 app installation. If your Win32 app would install an MSI as well (embedded), this will cause an issue because it's not possible to have multiple instances of Windows installer (in relation with TrustedInstaller) at the same time.
This is also documented in the following article (See Note):

https://docs.microsoft.com/en-us/troubleshoot/mem/intune/understand-troubleshoot-esp#device-setup

Mixing MSI and Exe is of course not best practice and not recommended but in many cases, it just works... Just like it's not best practise to push/set required all of your apps during the esp. We try to limit the amount of app required during the esp as possible. ALl other apps which some users need, can be installed manually from the company portal

https://call4cloud.nl/2020/11/the-powershell-win32-app-express/

@Rudy_Ooms 

I'm just speaking about a professional solution/concept, which would never cause any issue. You never know what the future holds...
You could also have this issue outside of the ESP process (meaning when the user is already logged on and has an interactive desktop). In that case, the installation of the impacted apps will be delayed. These apps will be available in worst cases only the next day...

But anyway, these are just recommendations and everyone can do what he wants ;)

So we use a RMM solution called Kaseya VSA. What looks to be the best option in my case is to have Autopilot deploy the VSA agent and nothing more.

Once the agent registers with Kaseya then run a script from Kaseya to deploy the remaining core software instead.
Hi

Sometimes you just cant escape from using win32 apps and msi (the intune mgt itself is also installed as msi) . If it was a perfect world.... :)... but i again i totally agree... thats for sure