Deploy TCPView to Microsoft Intune
SysinternalsWindowsversion 4.19, 11 April 2023
TCPView is in the PatchBee catalog as a Windows app from Sysinternals, synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.
The plan PatchBee writes
TCPView as an Intune app
The standard form for a Zip archive (x64, scope decided at plan time). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.
- Intune app type
- Windows app (Win32), .intunewin (wrapped)
- Install
- Wrapped: extracted into Program Files, a Start menu shortcut created, by PatchBee's silent-install wrapper.
- Uninstall
- The wrapper removes the install folder and the shortcut.
- Detection
- File: the main executable. The main executable in the install folder, version 4.19 or newer.
- Requirements
- x86 (32-bit), x64, ARM64
Installers in version 4.19
| Architecture | Type | Scope | Hash |
|---|---|---|---|
| x86 (32-bit) | Zip archive | scope decided at plan time | SHA-256 published |
| x64 | Zip archive | scope decided at plan time | SHA-256 published |
| ARM64 | Zip archive | scope decided at plan time | SHA-256 published |
PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.
About TCPView
TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.
When you start TCPView it will enumerate all active TCP and UDP endpoints, resolving all IP addresses to their domain name versions. You can use a toolbar button or menu item to toggle the display of resolved names. TCPView shows the name of the process that owns each endpoint, including the service name (if any).
By default, TCPView updates every second, but you can use the Options|Refresh Rate menu item to change the rate. Endpoints that change state from one update to the next are highlighted in yellow; those that are deleted are shown in red, and new endpoints are shown in green.
You can close established TCP/IP connections (those labeled with a state of ESTABLISHED) by selecting File|Close Connections, or by right-clicking on a connection and choosing Close Connections from the resulting context menu.
You can save TCPView's output window to a file using the Save menu item.
- Publisher
- Sysinternals
- License
- Proprietary
- Source
- winget · Microsoft.Sysinternals.TCPView
- Versions in catalog
- 1
How this becomes an app in your tenant
Sign in with your Microsoft work account and connect your Intune tenant once. Find TCPView in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When Sysinternals ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.
Read the step-by-step guideMore Windows apps
Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.