In this post I will be covering the topic on how to install Google chrome on MacOS using Intune. .pkg file format is the supported one which can be used to deploy, however .pkg format needs to be converted to .intunemac file format and this can be done using IntuneAppUtil utility available on Github. There are sequence of steps to be performed in order to create line of business application for MacOS, we will be exploring that.
Supported file format for deploying apps to MacOS
We can either use .dmg or .pkg, however if it is .dmg format it needs to be converted to .pkg first and the pkg file must be signed using Apple Certificate. Further more .pkg file again needs to be converted into .intunemac file format, this can be done through Intune App Wrapping Tool for Mac which can be download from Github – intune-app-wrapping-tool-mac.
The whole process of converting the .pkg to .intunemac format using wrapping tool should be performed on MacOS.
Download Google Chrome for Mac
Login to MacOS device open any browser. We will download the Google Chrome for Mac which will be in .pkg format. Navigate to URL https://chromeenterprise.google/browser/download/#mac-tab, under Chrome browser for Mac select:
Channel as Stable
File type will be having 2 choices:
PKG universal installer (x86 and ARM)
DMG universal installer (x86 and ARM)
We will be going with .pkg installer as this will reduce complexity of not converting .dmg to .pkg and not signing with Apple developer certificate.
Once downloaded, we can see GoogleChrome.pkg file present in folder.
Use Intune App Wrapping tool – IntuneAppUtil
Download IntuneAppUtil from https://github.com/msintuneappsdk/intune-app-wrapping-tool-mac.
Once downloaded, we need to open Terminal on MacOS.
Once Terminal is opened, navigate to the folder where IntuneAppUtil was downloaded, in my case it was Downloads folder, hence I changed the location by using command “cd downloads”.
First I will create a source folder where I would like to get .intuneMac file created. This can be done by running command “mkdir DestinationeApp”, which created DestinationeApp folder for me under Downloads folder.
I cannot directly use IntuneAppUtil, this needs to be converted in executable, for this I have to run the command:
Chmod +x IntuneAppUtil
After running the command I can see IntuneAppUtil is showing as Unix Executable file which is ready to be executed.
Very first thing before executing this command is to check for help, run the command:
We can see various parameters which can be used, we will be using following:
-c : to specify source file name in pkg format
-o : to specify destination location, we will be using ./DestinationApp
-v : This is optional, it is used for verbose logging which will show use progress and can be helpful in troubleshooting in case of failure.
Run the following command:
./IntuneAppUtil -c ./GoogleChrome.pkg -o ./DestinationeApp -v
Because of verbose logging enabled, we can see detailed output and can see final output created under DestinationeApp/GoogleChrome.pkg.intunemac
Create Line of Business App for MacOS in Intune
We will be creating the application on Intune portal, navigate to Microsoft Endpoint Manager admin center and navigate to Home > Apps > macOS, click on Add, under Add type we have multiple options available such as :
- Microsoft 365 Apps
- Microsoft Edge, version 77 and later
- Microsoft Defender for Endpoint
- Web link
- Line-of-business app
Select the last option ie. Line-of-business app.
Under Add App > App Information page, select app package file and browse to the location to select GoogleChrome.pkg.intunemac.
Click on OK to open App information page.
Under App Information, we will get following info generated:
Description: GoogleChrome.pkg (97.0.4692.71)
Minimum operating system: Mac OS X Lion 10.7
Ignore app version: Yes
Install as managed: No
App bundle ID: com.google.Chrome
Build number: 4692.71
For logo, you can download the icons from:
On Scope tags, click Next
On Assignments page, target the deployment to existing group under Required (which will be used as mandatory deployment), Click Next.
Verify the information under Review + create page and click on Create.
Allow some time to get the application created and to upload with message “Uploading GoogleChrome.pkg”
Once the application is created, wait for the sync to happen using Company Portal app installed on macOS device and we will see Google Chrome installed on the device.
We can verify the installation status through portal by navigating to MacOS Application, under Overview we can verify the Device status showing as installed, same can be verified while clicking on either Device install status or User install status.
Another way to verify the installation of application on specific MacOS device is to navigate to Devices > macOS > macOS devices > devicename > Managed Apps.
Detailed application installation behaviour can be seen here starting onwards Application created till App installation completed.
How to add macOS line-of-business apps to Microsoft Intune | Microsoft DocsGitHub – msintuneappsdk/intune-app-wrapping-tool-mac: Use the Intune App Wrapping Tool for Mac to enable Mac apps to be managed by Microsoft Intune