(106) Microsoft Intune - Common Win32 Apps Command Lines for Windows

As we all know Microsoft Intune offers the following ways to deploy apps to Windows devices.

Today I am going to cover the common command lines for Win32 Apps, which will need to be packaged using https://github.com/microsoft/Intune-Win32-App-Packaging-Tool.

Generally for any MSIs, I do convert them to Win32 App as it has better detection methods over Line-of-business apps.

Adobe Acrobat Reader:

Install Command Line:

AcroRdrDC2300820555_en_US.exe /sAll /rs /rps /msi /norestart /quiet EULA_ACCEPT=YES

Uninstall Command Line:

MsiExec.exe /x {AC76BA86-7AD7-1033-7B44-AC0F074E4100} /qn

Rule type: File

Path: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader

File or folder: AcroRd32.exe

Detection method: String (version)

Operator: Equals

Value: 23.8.20555.0

Associated with a 32-bit app on 64-bit clients: No

Google Chrome:

Install Command Line:

msiexec /i "GoogleChromeStandaloneEnterprise64.msi" /qn /norestart

Uninstall Command Line:

msiexec /x "{2981D58E-7F09-3E98-A7EF-62CA313BEEEE}" /qn

Rule type: File

Path: C:\Program Files\Google\Chrome\Application

File or folder: chrome.exe

Detection method: String (version)

Operator: Greater than or equal to

Value: 121.0.6167.160

Associated with a 32-bit app on 64-bit clients: No

PowerShell 7:

Install Command Line:

msiexec /i "PowerShell-7.4.1-win-x64.msi" /qn

Uninstall Command Line:

msiexec /x "{B06D1894-3827-4E0C-A092-7DC50BE8B210}" /qn

Rule type: File

Path: C:\Program Files\PowerShell

File or folder: 7

Detection method: File or folder exists

PowerShell 7 Modules:

Install Command Line:

%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -File .\Copy-ModulesP7.ps1

Uninstall Command Line:

%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -File .\Remove-ModulesP7.ps1

Rule type: Registry

Path: HKEY_LOCAL_MACHINE\SOFTWARE\OST\Software\PowerShell Modules\P7

File or folder: InstalledVersion

Detection method: VersionComparion

Operator: Equals

Value: 1.0

HP USB-C/A Universal Dock G2 Drivers:

Install Command Line:

"CallInst.exe" /app install.cmd /hide

Uninstall Command Line:

uninstall.cmd

Rule type: File

Path: C:\Program Files\HP\HP Firmware Installer\HP USB-C&A Universal Dock G2

File or folder: HPFIVersion.dll

Detection method: File or folder exists

HP USB-C/A Universal Dock G2 Drivers Ethernet:

Install Command Line:

install.cmd

Uninstall Command Line:

install.cmd

Rule type: File

Path: C:\ProgramData\HP\logs

File or folder: AllDocksE_22H6B2.log

Detection method: File or folder exists

Dependencies: HP USB-C/A Universal Dock G2 Drivers

HP USB-C/A Universal Dock G2 Drivers Graphics:

Install Command Line:

install.cmd

Uninstall Command Line:

install.cmd

Rule type: Registry

Path: HKEY_LOCAL_MACHINE\SOFTWARE\HP\HP Firmware Installer\HP USB-C/A Universal Dock G2

File or folder: AvailablePackageVersion

Detection method: Value Exists

Dependencies: HP USB-C/A Universal Dock G2 Drivers

Windows Package Manager (Winget):

Install Command Line:

%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -windowstyle hidden -executionpolicy bypass -command .\install.ps1

Uninstall Command Line:

install.cmd%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -windowstyle hidden -executionpolicy bypass -command .\uninstall.ps1

Rule type: Use a custom detection method

Run script as 32-bit process on 64-bit clients: No

Enforce script signature check and run script silently: No

Windows Package Manager - Update (Winget):

Install Command Line:

%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -windowstyle hidden -executionpolicy bypass -command .\install.ps1

Uninstall Command Line:

install.cmd%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -windowstyle hidden -executionpolicy bypass -command .\uninstall.ps1

Rule type: Use a custom detection method

Run script as 32-bit process on 64-bit clients: No

Enforce script signature check and run script silently: No

Dependencies: Windows Package Manager

Acer Docks - DisplayLink:

Install Command Line:

msiexec /i "DisplayLink_Win10RS.msi" /qn /norestart

Uninstall Command Line:

msiexec /x "{912F69AE-5F28-44FB-BA63-80942F6B5A08}" /qn

Rule type: File

Path: %programfiles%\DisplayLink Core Software

File or folder: DisplayLinkTrayApp.exe

Detection method: String (version)

Operator: Greater than or equal to

Value: 10.1.2875.0

Associated with a 32-bit app on 64-bit clients: No

BGInfo Desktop:

Install Command Line:

powershell.exe -noprofile -executionpolicy bypass -file .\BGInfo64-install.ps1

Uninstall Command Line:

powershell.exe -noprofile -executionpolicy bypass -file .\AppUninstaller.ps1

Rule type: File

Path: %Program Files%\BGInfo

File or folder: BGinfo64.exe

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No

Custom Desktop or Login Wallpaper:

[Note: This takes ownership of C:\Windows\Web, etc]

Install Command Line:

ReplaceWallpaper.cmd

Uninstall Command Line:

RemoveWallPaper.cmd

Rule type: File

Path: C:\BGVersion

File or folder: Version1.txt

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No

Custom Power Plan:

[Note: This works well without the use of Security Baselines and ACSC Baselines]

Install Command Line:

ImportPowerPlan.cmd

Uninstall Command Line:

UninstallPowerPlan.cmd

Rule type: Registry

Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}

File or folder: fb1564b9-e3e3-40f0-938b-f6d5c7526a01

Detection method: Value does not exist

Associated with a 32-bit app on 64-bit clients: No

TeamViewer Host:

Install Command Line:

msiexec /i "TeamViewer_Host.msi" /qn APITOKEN=EnterInAPIToken CUSTOMCONFIGID=EnterInCustomID

Uninstall Command Line:

msiexec /x "{053FEA94-0396-4E0B-A261-7CE96A91928E}"

Rule type: File

Path: C:\Progam Files (x86)\TeamViewer

File or folder: TeamViewer.exe

Detection method: String (version)

Operator: Greater than or equal to

Value: 15.41.8.0

Associated with a 32-bit app on 64-bit clients: No

CMTrace:

[Note: This is a tool from SCCM for troubleshooting logs]

Install Command Line:

Powershell.exe -executionpolicy bypass -file CmtraceInstall.ps1

Uninstall Command Line:

Powershell.exe -executionpolicy bypass -file CmtraceRemove.ps1

Rule type: File

Path: C:\Windows

File or folder: CMTrace.exe

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No

IP Printer:

[Note: You will need to grab the drivers of the printer which needs to be incorporated in the Win32 App]

Install Command Line:

powershell.exe -executionpolicy bypass -file Install-Printer.ps1 -PortName "IP_192.168.X.X" -PrinterIP "192.168.X.X" -PrinterName "Enter-PrinterName" -DriverName "FX DocuCentre-VII C4473 PCL 6" -INFFile "FX6BAAL.inf"

Uninstall Command Line:

powershell.exe -executionpolicy bypass -file Remove-Printer.ps1 -PrinterName "Enter-PrinterName"

Rule type: Registry

Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Enter-PrinterName

File or folder: Printer Driver

Detection method: String Comparison

Operator: Equals

Value: FX DocuCentre-VII C4473 PCL 6

Associated with a 32-bit app on 64-bit clients: No

Dell Command Update > As part of Microsoft Intune, driver rings are available

Install Command Line:

install.bat

Uninstall Command Line:

uninstall.bat

Rule type: File

Path: c:\driversupd\

File or folder: Runupdate.bat

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No

HP Image Assistant > As part of Microsoft Intune, driver rings are available

Install Command Line:

install.bat

Uninstall Command Line:

uninstall.bat

Rule type: File

Path: c:\driversupd\

File or folder: Runupdate.bat

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No

Lenovo System Update > As part of Microsoft Intune, driver rings are available

Install Command Line:

system_update_5.07.0136.exe /VERYSILENT /NORESTART

Uninstall Command Line:

"C:\Program Files (x86)\Lenovo\System Update\unins000.exe" /VERYSILENT /NORESTART

Rule type: File

Path: C:\Program Files (x86)\Lenovo\System Update

File or folder: tvsu.exe

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No

Microsoft Visual C++ Redistributable 2008 to 2023

Install Command Line:

install.cmd

Uninstall Command Line:

uninstall.cmd

Rule type: Registry

Path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\x64

File or folder: Bld

Detection method: Value exists

NotePad++

Install Command Line:

npp.8.4.2.Installer.x64.exe /S

Uninstall Command Line:

"%ProgramFiles%\Notepad++\uninstall.exe" /S

Rule type: %PROGRAMFILES%\Notepad++

Path: C:\Program Files (x86)\Lenovo\System Update

File or folder: Notepad++.exe

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No

PDFSam Basic

Install Command Line:

msiexec.exe /i "pdfsam-4.3.0.msi" ALLUSERS=1 /qn /norestart /log output.log SKIPTHANKSPAGE=Yes CHECK_FOR_UPDATES=false CHECK_FOR_NEWS=false

Uninstall Command Line:

msiexec /x "{8BD7882E-AF21-4327-9A48-333CAD22D3A1}" /qn

Rule type: File

Path: C:\Program Files\PDFsam Basic

File or folder: pdfsam.exe

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No

WinDirStat

Install Command Line:

windirstat1_1_2_setup.exe /S

Uninstall Command Line:

UninstallWinDirStat32.bat

Rule type: File

Path: C:\Program Files (x86)\WinDirStat

File or folder: windirstat.exe

Detection method: File or folder exists

Associated with a 32-bit app on 64-bit clients: No