Deploy ungoogled-chromium to Microsoft Intune
ungoogled-chromium AuthorsWindowsversion 153.0.8010.52, 20 September 2026
ungoogled-chromium is in the PatchBee catalog as a Windows app from ungoogled-chromium Authors, synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.
Install from the command line
winget install --id eloston.ungoogled-chromium -e --silentPatchBee runs the same silent install of ungoogled-chromium for you in Intune: the installer winget points at, verified, packaged with the switches and detection rule below, and published to your tenant.
The plan PatchBee writes
ungoogled-chromium as an Intune app
The standard form for a EXE installer (x64, per machine). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.
- Intune app type
- Windows app (Win32), .intunewin
- Install
- "ungoogled-chromium.exe" /silent /install --system-level
- Uninstall
- The uninstall string from the app's uninstall key
- Detection
- Registry: the app's uninstall key. DisplayVersion under the app's uninstall key, current version or newer.
- Requirements
- x86 (32-bit), x64, ARM64 · per user or per machine
Why these values: silent install switches and detection rules, explained.
Installers in version 153.0.8010.52
| Architecture | Type | Scope | Hash |
|---|---|---|---|
| x86 (32-bit) | Zip archive | scope decided at plan time | SHA-256 published |
| x86 (32-bit) | EXE installer | per user | SHA-256 published |
| x86 (32-bit) | EXE installer | per machine | SHA-256 published |
| x64 | Zip archive | scope decided at plan time | SHA-256 published |
| x64 | EXE installer | per user | SHA-256 published |
| x64 | EXE installer | per machine | SHA-256 published |
| ARM64 | Zip archive | scope decided at plan time | SHA-256 published |
| ARM64 | EXE installer | per user | SHA-256 published |
| ARM64 | EXE installer | per machine | SHA-256 published |
PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.
Silent install switches
Recorded for ungoogled-chromium in its winget manifest. PatchBee uses them as the installer's unattended switches, so the package installs without a click.
- Silent
- /silent /install
- Custom (always added)
- --system-level
About ungoogled-chromium
ungoogled-chromium is a set of configuration flags, patches, and custom scripts.
These components altogether strive to accomplish the following
* Disable or remove offending services and features that communicate with Google or weaken privacy
* Strip binaries from the source tree, and use those provided by the system or build them from source
* Add, modify, or disable features that inhibit control and transparency (these changes are minor and do not have significant impacts on the general user experience)
ungoogled-chromium should not be considered a fork of Chromium.
- Publisher
- ungoogled-chromium Authors
- License
- BSD-3-Clause
- Source
- winget · eloston.ungoogled-chromium
- Versions in catalog
- 242
How this becomes an app in your tenant
Sign in with your Microsoft work account and connect your Intune tenant once. Find ungoogled-chromium in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When ungoogled-chromium Authors ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.
Read the step-by-step guideMore Windows apps
Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.