Learn. Build. Deploy: Packaging Win32 Apps with Intune (Step-by-Step with Notepad++)

Ever wondered how IT admins silently deploy apps across hundreds of devices? In this post, you’ll learn how to package and deploy Notepad++ using Microsoft Intune’s Win32 Content Prep Tool—step by step. But before we dive into the actual steps, let’s first go over some key Intune concepts.

Intune App Lifecycle

Understanding the app lifecycle in Intune helps ensure apps are properly managed from deployment to retirement. The core stages are:

• Add — Upload apps to Intune (store, LOB, web links, built-in). This lays the groundwork for managing and assigning apps.

• Deploy — Assign apps to users or devices. Intune supports license tracking (e.g., Apple VPP) and deployment monitoring via the portal.

• Configure — Use configuration policies to keep apps up to date and customize settings (e.g., server URLs, branding).

• Protect — Safeguard corporate data using:

  • Conditional Access based on compliance

  • App Protection Policies to manage behavior on non-compliant devices

• Retire — Remove and clean up apps that are no longer needed.

Source: Microsoft Intune App Lifecycle

Intune App Management

Intune helps you secure and manage apps on both corporate and personal devices using Mobile Application Management (MAM) and Mobile Device Management (MDM).

Key Benefits

• Data Protection — Control data sharing and app behavior

• Broad Platform Support — Manage apps across Android, iOS/iPadOS, and Windows

• Access Control — Use Conditional Access and compliance rules

• App Configuration & Updates — Customize settings and automate updates

• Support for Personal Devices — Apply MAM policies without enrollment

Real-World Use Cases

• Deploy apps to targeted user groups

• Enforce corporate data protection

• Control access based on user/device risk

• Ensure apps stay patched and secure

Sources:

• App Management Overview

• Microsoft Intune app management

What is a Win32 App in Intune?

A Win32 app is a traditional desktop application packaged using Microsoft’s Win32 Content Prep Tool into a .intunewin format. This lets Intune deploy EXE and MSI apps not found in the Microsoft Store.

Features

• Supports EXE/MSI installers

• Custom install/uninstall commands

• Works with detection rules & requirement checks

• Allows complex installation logic

Prerequisites

• Use Windows 10 version 1607 or later (Enterprise, Pro, and Education versions).

• Devices must be joined or registered to Microsoft Entra ID and be auto-enrolled. The Intune management extension supports devices that are Microsoft Entra joined, Microsoft Entra registered, hybrid domain joined, or group policy enrolled.

• Windows application size is capped at 30 GB per app.

Below is the process flow to add a Win32 app in Intune.

Source: Win32 App Management

---

What is the Win32 Content Prep Tool?

The Win32 Content Prep Tool (IntuneWinAppUtil.exe) wraps app installers and related files into a .intunewinpackage for Intune deployment.

Use this tool for deploying LOB apps, third-party installers, or any EXE/MSI-based software.

Prerequisites

• Admin permissions in Intune

• App installer file (e.g., npp.8.6.5.Installer.x64.exe)

• Windows 10/11 system to run the tool

• PowerShell (optional for automation)

• .NET Framework 4.7.2

• 

Limitations

• Can run in user context only if no elevation is required

• No built-in update/supersedence support

• Max file size ~30 GB

• Must rely on detection logic for success reporting

---

Wrap and Deploy Notepad++

Step 1: Set Up Folder Structure

### 📁 Folder Structure
Organize your working directory like below before running the prep tool (Example Only):

C:\Win32Apps
├── Source   
    └── npp.8.6.5.Installer.x64.exe
├── Output
└── Tool    
    └── IntuneWinAppUtil.exe

Step 2: Run the Content Prep Tool

.\IntuneWinAppUtil.exe -c 'C:\Win32Apps\Source' -s 'npp.8.8.2.Installer.arm64.exe' -o 'C:\Win32Apps\Output'

---

Step 3: Upload and Configure in Intune

1. Go to Apps > Windows in the Intune Admin Center

   

2. Click Create > App type: Windows app (Win32)

   

3. Upload your .intunewin file

   

   

Configure App

• Install command: npp.8.8.2.Installer.arm64.exe /S

• Uninstall command: %ProgramFiles%\Notepad++\uninstall.exe /S

• Install behavior: System

  

Configure Program, Requirements, Detection Rule, Dependencies, Supersedence and Assignments

Set:

• Minimum OS

• Architecture (x64)

  💡

  More information about Requirements

  

• Detection rule:

  • Path: C:\Program Files\Notepad++

  • File: notepad++.exe

  • Method: File exists

    💡

    More information about Detection Rules

    

    

• Dependencies

• Supersedence

Assign the app as Available in Company Portal for your group. My group will be sg-Engineering.

• Required = Auto-install the application for the group(s)

• Available = User installs via Company Portal

• Uninstall = Uninstall the application for the group(s)

  

  

Review + create the Notepad++ Win32 Application and click Create.

---

Win32 App Deployment Flow

Below is the lifecycle of a Win32 app flow on a device.

Source: Deployment Flow

---

End User Experience

Open Company Portal from Start Menu. You should see Notepad++ available for install.

If not, click Settings > Sync in Company Portal.

Click Install, wait for it to complete, then open the app!

---

Final Thoughts

You’ve just packaged and deployed Notepad++ using Intune’s Win32 Content Prep Tool.

Next challenge: try wrapping 7-Zip, VLC, or your own enterprise apps.

Learn. Build. Repeat. 🚀