Anyone who has worked with Intune and deployed an app knows that this is a bit of work. You have to download the sources, create the IntuneWin file, create the app in Intune. To simplify this I have created the Intune App Creator. With this application you can search within the >9,000 Chocolatey packages and automatically add this app to your Intune app portfolio with just one click.
Table of contents
How does the Intune App Creator work
When you open the app it will check if you already have Chocolatey, the basic app for the whole thing, in your application portfolio. If this is the case, the application ID will be displayed. If this is not the case then you will see a button with which you can add the app. This app will then be attached as a dependency to any other app you create with my tool.
When you select an app then an install and uninstall script will be generated and an Intunewin file is created. In the next step the app uploads the file and creates the app in your Intune tenant. The only thing you have to do is to create the assignment of the app.
Because Chocolatey is set as a dependency, Intune installs it automatically before the actual package runs, so you never have to ship the package manager separately. After the tool finishes, open the app in the Intune portal and quickly review the generated detection rule and the install command. In most cases the defaults are fine, but for apps that install into a custom path it is worth double checking that the detection rule actually matches what landed on the device. Once you are happy, assign the app to a test group first and let it run on a single device before you roll it out broadly.
Prerequisites
To use the tool you need a custom repository. How you can set it up is explained in one of these links:
- https://docs.chocolatey.org/en-us/features/host-packages
- https://docs.chocolatey.org/en-us/guides/organizations/set-up-chocolatey-server
- https://www.youtube.com/watch?v=UehkG1VHtz0&list=PLGvGJzqY88slnTkOEh3BIHGv0P8jw9rll
How can you get the Intune App Creator
- Open my GitHub repository
- Download and unzip the whole folder
- Make sure that the PowerShell SDK is installed on your system. If not install the SDK using the following command:
Install-Module Microsoft.Graph -Scope CurrentUser
If you have chocolatey already in your App Portfolio you can insert the name of the App in Intune in the Start-IntuneAppCreator.ps1 script.
- Execute the Start-IntuneAppCreator
- Have fun
Note
If you get the following error on your system when executing the Intune App Creator:
You have to unblock the DLLs. Navigate for this to the libraries folder and click Unblock in the properties on each DLL.
It may be that you need to restart your PowerShell session to get the error message gone. After that, the Intune App Creator should start without any issues. If you want to combine this with broader app packaging, see my other posts on jannikreinhard.com and the official Microsoft Learn Win32 app documentation.
Credits
Information
An Intune integration is part of Chocolatey For Business, that was released in December 2021. The release notes are at https://docs.chocolatey.org/en-us/licensed-extension/release-notes#breaking-changes-1. This tool is an unofficial product that provides a GUI to easily add apps to the Intune tenant.
Conclusion
Thanks for your support and reading my blog post. I hope the Intune App Creator could help you deploy apps to your tenant without much effort.
Stay healthy, Cheers
Jannik
I’m getting this error launching Chocolatey-Intune-App-Creator.
Add-XamlEvent : Cannot bind argument to parameter ‘object’ because it is null.
At C:\temp\Chocolatey-Intune-App-Creator-main\modules\uiHandler.psm1:56 char:27
+ Add-XamlEvent -object $WPFDataGridAllApps -event “Add_GotMouseCap …
+ ~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Add-XamlEvent], ParameterBindingValidationException
+ FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Add-XamlEvent
i’m getting the same error, can’t really figure out what’s wrong.
Thanks Jannik. I am keen to give this a try but I am hitting an error for graph. I get prompted for UPN, i log in, but then get login failed error.
I have GA permission, no PIM with MFA in place. All prereqs in place for powershell sdk, Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass in place.
Get-GraphAuthentication: Failed to connect to MgGraph
True
Get-MgDeviceAppMgtMobileApp_List1: Authentication needed, call Connect-MgGraph.
Can you check Version 1.1
Thanks for checking this. Dont think a reply came in. Here it is again. on v1.1.
PS C:\Users\User> Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass
PS C:\Users\User>
PS C:\Users\User\Downloads\Chocolatey-Intune-App-Creator-main> . “c:\Users\User\Downloads\Chocolatey-Intune-App-Creator-main\Start-ChocolateyIntuneAppCreator.ps1”
Test
Get-MgOrganization_List: Insufficient privileges to complete the operation.
——————————————————
Connection to graph success:
Connected as: admin@tenant.onmicrosoft.com
TenantId: 12d0cff7-c56c-4658-b6e4-1234567890
Organizsation Name:
——————————————————
True
Get-MgDeviceAppMgtMobileApp_List: { “_version”: 3, “Message”: “Application is not authorized to perform this operation. Application must have one of the following scopes: DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All –
Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 – Activity ID: cecc9c88-8da2-44d7-9a7c-f210401c471a – Url:
https://fef.msub06.manage.microsoft.com/AppLifecycle_2208/StatelessAppMetadataFEService/deviceAppManagement/mobileApps?api-version=5022-06-16&$filter=displayName+eq+%27Chocolatey%27“, “CustomApiErrorPhrase”: “”,
“RetryAfter”: null, “ErrorSourceService”: “”, “HttpHeaders”: “{}” }
PS C:\Users\User\Downloads\Chocolatey-Intune-App-Creator-main>
Web request status [Web request completed. (Number of bytes processed: 55184)
Is your user intune admin?
Yes user is global admin. looks like permissions related to app registration?
[…] https://jannikreinhard.com/2022/08/01/introduction-of-the-chocolatey-intune-app-creator/ […]
How about from macOS ? Is this supposed
This is little bit more complex but I will consider this in the next version.