Deploy Duo Authentication for Windows Logon to Microsoft Intune
Duo Security Inc.Windowsversion 5.3.0.2497, 2 April 2026
Duo Authentication for Windows Logon is in the PatchBee catalog as a Windows app from Duo Security Inc., synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.
The plan PatchBee writes
Duo Authentication for Windows Logon as an Intune app
The standard form for a EXE installer (x64, scope decided at plan time). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.
- Intune app type
- Windows app (Win32), .intunewin
- Install
- "DuoAuthenticationforWindowsLogon.exe" /quiet /norestart
- Uninstall
- Uninstall string of {79A3CE93-A9ED-42B6-8B00-E9A8619D80EC}
- Detection
- Registry: the app's uninstall key. Uninstall key {79A3CE93-A9ED-42B6-8B00-E9A8619D80EC}, DisplayVersion 5.3.0.2497 or newer.
- Requirements
- x86 (32-bit), x64, ARM64
Installers in version 5.3.0.2497
| Architecture | Type | Scope | Hash |
|---|---|---|---|
| x86 (32-bit) | EXE installer | scope decided at plan time | SHA-256 published |
| x64 | EXE installer | scope decided at plan time | SHA-256 published |
| ARM64 | EXE installer | scope decided at plan time | SHA-256 published |
PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.
Silent install switches
Recorded for Duo Authentication for Windows Logon in its winget manifest. PatchBee uses them as the installer's unattended switches, so the package installs without a click.
- Silent
- /quiet /norestart
- Silent with progress
- /passive /norestart
- Install location
- INSTALLDIR="<INSTALLPATH>"
- Log
- /log "<LOGPATH>"
About Duo Authentication for Windows Logon
Duo Authentication for Windows Logon adds Duo two-factor authentication to these Windows and Windows Server logon scenarios:
- Local or domain account logins
- Logins at the local console and/or incoming Remote Desktop (RDP) connections
- Credentialed User Access Control (UAC) elevation requests (e.g. Right-click + "Run as administrator") in v4.1.0 and later
Duo's Windows Logon client does not add a secondary authentication prompt to the following logon types:
- Shift + right-click "Run as different user"
- Publisher
- Duo Security Inc.
- Homepage
- duo.com/docs/rdp
- License
- Proprietary
- Source
- winget · DuoSecurity.Duo2FAAuthenticationforWindows
- Versions in catalog
- 3
How this becomes an app in your tenant
Sign in with your Microsoft work account and connect your Intune tenant once. Find Duo Authentication for Windows Logon in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When Duo Security Inc. ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.
Read the step-by-step guideMore Windows apps
Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.