Microsoft Intune deployment

For cloud-managed Windows fleets, deploy PermitUSB as a Win32 app through Intune.

Prerequisites

  • Microsoft Intune license
  • The IntuneWinAppUtil.exe content prep tool
  • PermitUSB.msi
  • An enrollment token from the dashboard

Package the MSI

Place the MSI in a folder, then:

IntuneWinAppUtil.exe -c <folder> -s PermitUSB.msi -o <output-folder>

That produces PermitUSB.intunewin.

Upload to Intune

  1. Microsoft Intune admin centre → Apps → Windows → Add → Windows app (Win32).
  2. Upload the .intunewin.
  3. Install command:
    msiexec /i PermitUSB.msi /qn TENANT_TOKEN="<token>"

    SERVER can be omitted; it defaults to https://permitusb.com. Pass it explicitly only if you're pointing the agent at a non-default origin.

  4. Uninstall command: msiexec /x {product-code} /qn
  5. Detection rule: MSI product code (Intune detects this from the .intunewin automatically).
  6. Assignments: required, scoped to your target group.

Verification

Intune deploys at the next sync cycle (typically within 1 hour of assignment). Watch the dashboard's Endpoints page and check the per-device install status in Intune for any failures.

Per-device targeting

For different endpoint groups across teams, create a separate Intune app per group with the matching ENDPOINT_GROUP property. Assign each app to the right Azure AD group.

Microsoft Intune deployment — PermitUSB docs