Anyone who has worked with Intune and deployed an app knows that this is a bit of work. You have to download the sources, create the IntuneWin file, create the app in Intune. To simplify this I have created the Intune App Creator. With this application you can search within the >9,000 Chocolatey and automatically add this app to your Intune app portfolio with just one click.

How does it work
When you open the app it will check if you already have Chocolatey, the basic app for the whole thing, in your application portfolio. If this is the case, the application ID will be displayed. If this is not the case then you will see a button with which you can add the app. This app will then be attached as a dependency to any other app you create with my tool. When you select an app then an install and uninstall script will be generated and an Intunewin file is created. In the next step the app uploads the file and creates the app in your Intune tenant. The only thing you have to do is to create the assignment of the app.
Prerequisites
To use the tool you need an custom repository. How you can setup is explained in one of this links:
- https://docs.chocolatey.org/en-us/features/host-packages
- https://docs.chocolatey.org/en-us/guides/organizations/set-up-chocolatey-server
- https://www.youtube.com/watch?v=UehkG1VHtz0&list=PLGvGJzqY88slnTkOEh3BIHGv0P8jw9rll
How can you get the Tool
- Open my GitHub repository
- Download and unzip the whole folder

- Make sure that the PowerShell SDK is installed on your system. If not install the SKD using the following command:
Install-Module Microsoft.Graph -Scope CurrentUser
If you have chocolatey already in your App Portfolio you an insert in the the Start-IntuneAppCreator.ps1 script the name of the App in Intune.

- Execute the Start-IntuneAppCreator
- Have fun
Note
If you get the following error on your system when executing the Intune App Creator:

You have to unblock the dll’s. Navigate for this to the libaries folder and click Unblock in the properties on each dll’s.

It may be that you need to restart your PowerShell session to get the error message gone.
Credits
Information
A Intune integration is part of Chocolatey For Business, that was released in December 2021. The release notes are at https://docs.chocolatey.org/en-us/licensed-extension/release-notes#breaking-changes-1. This tool is an unofficial product that provides a GUI to easily add apps to the Intune tenant.
Conclusion
Thanks for your support and reading my blog post. I hope I could help you with this tool that you can deploy apps to your tenant without much effort.
Stay healthy, Cheers
Jannik
I’m getting this error launching Chocolatey-Intune-App-Creator.
Add-XamlEvent : Cannot bind argument to parameter ‘object’ because it is null.
At C:\temp\Chocolatey-Intune-App-Creator-main\modules\uiHandler.psm1:56 char:27
+ Add-XamlEvent -object $WPFDataGridAllApps -event “Add_GotMouseCap …
+ ~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Add-XamlEvent], ParameterBindingValidationException
+ FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Add-XamlEvent
LikeLike
i’m getting the same error, can’t really figure out what’s wrong.
LikeLike
Thanks Jannik. I am keen to give this a try but I am hitting an error for graph. I get prompted for UPN, i log in, but then get login failed error.
I have GA permission, no PIM with MFA in place. All prereqs in place for powershell sdk, Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass in place.
Get-GraphAuthentication: Failed to connect to MgGraph
True
Get-MgDeviceAppMgtMobileApp_List1: Authentication needed, call Connect-MgGraph.
LikeLike
Can you check Version 1.1
LikeLike
Thanks for checking this. Dont think a reply came in. Here it is again. on v1.1.
PS C:\Users\User> Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass
PS C:\Users\User>
PS C:\Users\User\Downloads\Chocolatey-Intune-App-Creator-main> . “c:\Users\User\Downloads\Chocolatey-Intune-App-Creator-main\Start-ChocolateyIntuneAppCreator.ps1”
Test
Get-MgOrganization_List: Insufficient privileges to complete the operation.
——————————————————
Connection to graph success:
Connected as: admin@tenant.onmicrosoft.com
TenantId: 12d0cff7-c56c-4658-b6e4-1234567890
Organizsation Name:
——————————————————
True
Get-MgDeviceAppMgtMobileApp_List: { “_version”: 3, “Message”: “Application is not authorized to perform this operation. Application must have one of the following scopes: DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All –
Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 – Activity ID: cecc9c88-8da2-44d7-9a7c-f210401c471a – Url:
https://fef.msub06.manage.microsoft.com/AppLifecycle_2208/StatelessAppMetadataFEService/deviceAppManagement/mobileApps?api-version=5022-06-16&$filter=displayName+eq+%27Chocolatey%27“, “CustomApiErrorPhrase”: “”,
“RetryAfter”: null, “ErrorSourceService”: “”, “HttpHeaders”: “{}” }
PS C:\Users\User\Downloads\Chocolatey-Intune-App-Creator-main>
Web request status [Web request completed. (Number of bytes processed: 55184)
LikeLike
Is your user intune admin?
LikeLike
Yes user is global admin. looks like permissions related to app registration?
LikeLike
[…] https://jannikreinhard.com/2022/08/01/introduction-of-the-chocolatey-intune-app-creator/ […]
LikeLike
How about from macOS ? Is this supposed
LikeLike
This is little bit more complex but I will consider this in the next version.
LikeLike