Guides
The hard parts of Intune app management, written down
Detection rules that detect, switches that stay silent, supersedence that does not leave two versions fighting, macOS packaging that installs once, and a patch policy a small team can keep. Each guide stands on its own; the PatchBee part is marked.
Win32 and macOS
Intune detection rules, explained: MSI, EXE, MSIX and macOS
How Intune decides an app is installed, which rule to use for each installer type, the version-comparison traps, and how to test a rule before it reaches a thousand devices.
11 min read
Reference
Silent install switches by installer type
The unattended switches for MSI, Inno Setup, NSIS, WiX Burn, InstallShield, Squirrel and Chromium-style installers, how to find the ones a vendor does not document, and the mistakes that make a silent install hang.
10 min read
Updates
Intune Win32 app supersedence: update or replace, and when it fails
What a supersedence relationship does, the difference between update and replace, the chain limits, the mistakes that leave two versions fighting, and how rollback actually works.
9 min read
macOS
PKG or DMG: packaging macOS apps for Intune
The two macOS app types Intune offers, what each can and cannot do, how detection works through bundle identifiers, and the version mismatches that cause endless reinstalls.
8 min read
Security
Prioritising third-party patches with CVSS and CISA KEV
Why a CVSS score alone ranks patches badly, what the Known Exploited Vulnerabilities list adds, and a four-tier policy for desktop apps that a small team can actually keep.
9 min read
Step by step
How to package a Win32 app for Intune by hand
The full manual route: installer, switches, IntuneWinAppUtil, the Win32 app wizard field by field, detection, assignments and monitoring, with the places it usually goes wrong.
12 min read
Try PatchBee on your tenant.
Sign in with your Microsoft work account, pick a plan, and connect your tenant. Free forever under 50 devices, or a 30-day trial of Pro or MSP. No card.