Deploy Windows Intune agent via Microsoft Deployment Tools (MDT) 2010

You have the opportunity to deploy the Windows Intune agent to the computers in your network. The deployment can with System Center Configuration Manager (SCCM), logon script or WDS in combination with MDT 2010.

This blog is only for MDT 2010. You have already installed WDS and MDT. Also you have made a deployment share via MDT 2010. I’ll not explain this in my blog. This blog is about how to deploy the agent via MDT. Maybe next time I’ll tell you about the installation of MDT 2010.

In the management console of Windows Intune you have the option to download the Windows Intune package. In this package you have a .exe  and an .accountcert file. These files must in the same directory. If you don’t do this you will get an error during the installation.  The information in the accountcert file is needed during the installation. During the installation the setup will make a computer certification for the computer. This is needed for the communication and authentication to the cloud. This way of deployment is working for x86 and x64 platform.

First go to the console. In the console you have to go to administration and then Client Software Download. Click on the button Download Client Software.

Save the file.

Click the button Open and copy the files and paste the file to the correct application directory of MDT 2010.

Open MDT and goto your deployment share -> applications. Right click on Applications and click on New Application.

This screen will appear. The first button has to be selected. Otherwise choose for the first option. Click Next.

Type the name of the package.

Browse to the deployment share directory. You should select Move the files to the deployment share instead of copying them. Otherwise you get 2 directory’s with the name Windows Intune agent.  I don’t why my selection is grayed out. I’ll get 2 Windows Intune directory’s. It’s maybe my test environment.   Click Next.

You don’t have to change this.

Add the installation file(Windows_Intune_Setup.exe) and argument /Quiet in the command box. This will install the agent at the background in silent mode. Don’t change the working directory.


And the package is made in MDT. Click Finish.

Now you have to make a task sequence for deploying an image or at this application to the exist task sequence.


Windows Intune: How to deploy software

In this blog I’ll explain how to import an application like Adobe Reader in Windows Intune, set the application ready for the deployment and install the application via Windows Intune Center.

Open the console and go to Software. At the right of the screen you see Step 1. Upload Software. Click on that link.

You get a new screen. At the first time, you will get a warning about a plugin. You have to install the plugin. Click Run.

You have to sign in with your Microsoft Live credentials.

Click Next.  This screen is not important. If you don’t want this begin page you could select Do not show this page again. Click on the Next button.

Before uploading the setup files, you have to take a look at and on the link Package KB. This site is a knowledge base for installing applications as network installation or application deployment. You get a lots of information about the setup arguments and registry setup tweaks.  For Adobe Reader example, you have to extract the downloaded file first. The files that are extracted is needed for the deployment. If the application setup is using more than 1 files you have to select Include additional files and sub folders from the same folders. Click Next.

Give the package a name. Click Next.

Specify the requirements what is needed for the deployment. I have downloaded the Windows 7 version of Adobe Reader. This is not working on a Windows XP machine. So, I have chosen for Windows 7. Click Next.

On this page you have to give some setup arguments. On the website you could find some handy arguments. Most of the arguments for MSI setup is /q or /Quiet. This one will installing the application on the background.  Click Next.

Summary page. Click Next.

The installation files are compressed before uploaded to the cloud. This is needed because the free space. By default you get 2GB of free space in the cloud. That’s not much!

The upload is ready. Click Next.

You are back at the console. You see the installation package in Software. Select the application and click on Deploy in the menu.

Click on Do not Install beneath Deployment and select for Install. You could also select it for a different group. In my example I’m not using groups. So I selected Unassigned Computers. This one is by default in Windows Intune.

The status of Deployed is from No to Yes. This will not say it’s already deployed on a computer, but the package is ready for deployment

On the client side open Windows Intune Center. Click the button Check for updates. It’s maybe strange that you have to check for updates because the software deployment is not an update. Unfortunately Microsoft have made this way. You have to check for updates if you want to deploy applications. So, maybe you will get a big list with updates and software deployment.

The check has found 1 update. Click Install updates.

Click on Review and install.

It’s the correct application. Click on install.

The deployment is ready and the application is installed. Click Close.

Windows Intune commands

I have found the important commands for installing the updates after deployment and agent installation. To search for new Windows updates, and this includes the software distribution in Windows Intune, you have to click on the button in Windows Intune Center. I have found a command to check for updates and a command to install the necessary updates. This could be handy to speed up the deployment process. Otherwise you have to manually start the windows updates process via Windows Intune Center or you have to wait for 8 hours for an automatically installation. This is the button in Windows Intune Center.

This button is not more necessary if you use the command /updatenow and /detectnow

First you need the to find the executable. Open command prompt and goto %programfiles%\ Microsoft\OnlineManagement\Updates\Bin\ In this folder you see omupdclt.exe.

Run for detect %programfiles%\Microsoft\OnlineManagement\Updates\Bin\omupdclt.exe /detectnow

You don’t get any information on the screen. For the detailed information you have to look at the logs in %programfiles%\ Microsoft\OnlineManagement\Logs\Updates.log or look at the systembar for this icon -> This icon means that the updates are detected and ready to install.

After that you have to run %programfiles%\ Microsoft\OnlineManagement\Updates\Bin\omupdclt.exe /updatenow.

This command will install the updates. You will get a pop-up of the Windows Intune Updates process bar. See screenshot:

For more information you should check the updates.log in %programfiles%\ Microsoft\OnlineManagement\Logs\ or the eventvwr.