Skip to content

Deploy Autoruns to Microsoft Intune

SysinternalsWindowsversion 14.3, 17 June 2026

Autoruns is in the PatchBee catalog as a Windows app from Sysinternals, synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.

The plan PatchBee writes

Autoruns as an Intune app

The standard form for a Zip archive (x64, scope decided at plan time). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.

Intune app type
Windows app (Win32), .intunewin (wrapped)
Install
Wrapped: extracted into Program Files, a Start menu shortcut created, by PatchBee's silent-install wrapper.
Uninstall
The wrapper removes the install folder and the shortcut.
Detection
File: the main executable. The main executable in the install folder, version 14.3 or newer.
Requirements
x86 (32-bit), x64, ARM64

Installers in version 14.3

ArchitectureTypeScopeHash
x86 (32-bit)Zip archivescope decided at plan timeSHA-256 published
x64Zip archivescope decided at plan timeSHA-256 published
ARM64Zip archivescope decided at plan timeSHA-256 published

PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.

About Autoruns

This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and when you start various built-in Windows applications like Internet Explorer, Explorer and media players. These programs and drivers include ones in your startup folder, Run, RunOnce, and other Registry keys. Autoruns reports Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. Autoruns goes way beyond other autostart utilities.

Autoruns' Hide Signed Microsoft Entries option helps you to zoom in on third-party auto-starting images that have been added to your system and it has support for looking at the auto-starting images configured for other accounts configured on a system. Also included in the download package is a command-line equivalent that can output in CSV format, Autorunsc.

You'll probably be surprised at how many executables are launched automatically!

Publisher
Sysinternals
License
Proprietary
Source
winget · Microsoft.Sysinternals.Autoruns
Versions in catalog
1
sysinternals

How this becomes an app in your tenant

Sign in with your Microsoft work account and connect your Intune tenant once. Find Autoruns in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When Sysinternals ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.

Read the step-by-step guide

More Windows apps

Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.