In this post I will walk through on how to install Chrome using Microsoft Intune. Packages / applications can be deployed in different ways as Microsoft support different kind of App type to deploy.
List of supported app types
Following are the list of App type supported with Windows 10 (hopefully should support windows 11 as well):
- MSI – This format can be directly deployed through Intune console as Line-of-business (LOB)apps
- .IntuneWin – Specifically used for exe files. We need to convert .exe format to .Intunewin file format using Microsoft Win32 Content Prep Tool which uses IntuneWinAppUtil.exe for the conversion.
- Office C2R – To deploy Office 365 apps
- LOB: APPX/MSIX – Another kind of LOB Apps
- MSFB Offline – To deploy apps listed in Microsoft Store for Business, we need to download first and then create package in intune
- MSFB Online – apps from Microsoft Store for Business can be directly deployed.
- Web Apps
- Store Link
- Microsoft Edge
Not all App type are supported for each Windows 10 version MSi file is not supported for Home edition, while supports all other Windows 10 version ie. Pro, Business, Enterprise, Education, S-Mode etc
Link can be followed to see complete list of supported apps
Prequisites to Deploy App
Device must be registered / Azure Active Directory Joined and auto-enrolled.
Download Google Chrome browser standalone msi
To download Chrome browser, use the link.
Select Chrome bundle for Windows 64-bit, and download the bundle which will be in zip format.
Extract GoogleChromeEnterpriseBundle64.zip
We will see multiple folders Configuration, Documentation, Installers. To install Google chrome browser, we are interested only for Installers folder which contains the standalone file ie. GoogleChromeStandaloneEnterprise64.msi
Create Application on Intune
Login to Microsoft Endpoint Manager Admin Center, navigate to Apps > Windows > Windows apps. Click Add.
This is will open Select app type window, from drop down menu select Line-of-business app.
This will show list of supported LOB apps such as apk, ipa, .intuneMac, .msi, .appx, .appxbundle, .msix, .msixbundle. We are good to go as we have msi format which is supported, click Select.
On App information page, select app package file. Click on folder icon to specify the location of chrome standalone msi file which we previously downloaded, and click OK.
Fields will be populated once msi file is selected. Specify the important options such as:
Name: Google Chrome Browser
Description: Google Chrome
Publisher: Google
App install context: Device (this is set to device only as the specific application doesn’t give option to select with user context)
Ignore app version: Yes (If the app has a setting for automatically updating it, we set this option)
Logo: select image file to get the logo. There are multiple places from where you can download the application icon. Few of them are:
- Download icons From github
- Microsoft intune Icons – Download 873 Free Microsoft intune icons here (iconarchive.com)
Click Next
On Assignments page, we are going to deploy the app. We can deploy to specific group, all users or all devices.
Required deployments is forcefully install on selected groups / devices. While Available deployments will make the application available in Company Portal which makes the application optional for user to install.
For demonstration purpose, let’s click Add all devices, click Next
On Review + create page, verify the settings and click Create.
You might get message “Your app is not ready yet, if app content is uploading, wait for it to finish”
This is normal as the upload was not completed yet and it will be in progress.
Under Notification I can see the message Uploading Google Chrome Browser with percentage.
After waiting for couple of minutes, I got message the upload finished. Hence, application is ready and policy for deploy application has targeted to devices.
Check Deployment Status – on Device
Login to the system, allow some time to sync the device. You can force the sync by navigating to Start Menu > Accounts > Access work or school, click on Info.
On page Areas managed by <companyname>, under section Device sync status, click on Sync. Wait for some time till you see “The sync was successful” and we will see list the of applications listed which has been targeted.
After waiting for few minutes, we can see the Chrome browser installed successfully.
Installation status can be verified through logs, open c:\windows\temp\chrome_installer.log.
We can see the actual command line executed at backend:
[0924/130443.238:VERBOSE1:setup_main.cc(1449)] Command Line: "C:\Program Files (x86)\Google\Update\Install\{BAAF5F52-8516-4FC8-A22D-36D958673D35}\CR_E85E9.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Google\Update\Install\{BAAF5F52-8516-4FC8-A22D-36D958673D35}\CR_E85E9.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome --system-level /installerdata="C:\Windows\TEMP\gui96E0.tmp"
[0924/130448.879:VERBOSE1:setup_main.cc(1648)] Installation complete, returning: 0
With return code 0, hence application install succeeded.
Check Deployment Status – Intune Portal
We are going to check deployment status of application on Intune Portal.
On MEM Admin Center, under Windows apps, click on Google Chrome Browser.
On Overview page, this gives the status in graphical format, 1 device is showing as Install Pending, seems like devices hasn’t send the installation status. Once done, it will be displayed under Installed.
Click on Device install status, we will be able to see list of devices with installation status shown.
Use Links:
Windows 10 app deployment by using Microsoft Intune | Microsoft Docs
This was great information and worked great for me. Is there a command line argument or something that will remove the Desktop Icon after the application is installed?