Skip to content

Deploy Proton VPN to Microsoft Intune

Proton AGWindowsversion 5.1.8, 31 August 2026

Proton VPN is in the PatchBee catalog as a Windows app from Proton AG, synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.

The plan PatchBee writes

Proton VPN as an Intune app

The standard form for a Inno Setup (x64, per machine). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.

Intune app type
Windows app (Win32), .intunewin
Install
"ProtonVPN.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Uninstall
"unins000.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART
Detection
Registry: the Inno Setup uninstall key. Uninstall key Proton VPN_is1, DisplayVersion 5.1.8 or newer.
Requirements
x64, ARM64 · per machine

Installers in version 5.1.8

ArchitectureTypeScopeHash
x64Inno Setupper machineSHA-256 published
ARM64Inno Setupper machineSHA-256 published

PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.

About Proton VPN

We built ProtonVPN with extra security features to make it better at protecting your privacy than an ordinary VPN.

When you use ProtonVPN to browse the web, your Internet connection is encrypted.

By routing your connection through encrypted tunnels, ProtonVPNs advanced security features ensure that an attacker cannot eavesdrop on your connection.

It also allows you to access websites that might be blocked in your country.

Publisher
Proton AG
License
GPL-3.0
Source
winget · Proton.ProtonVPN
Versions in catalog
30
networkopen-sourceprivacyprivateprivate-networksecurityvpn

How this becomes an app in your tenant

Sign in with your Microsoft work account and connect your Intune tenant once. Find Proton VPN in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When Proton AG ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.

Read the step-by-step guide

More Windows apps

Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.