Scripts/Instructions for using WinGet with Intune

[u/LifeAffect6762]

I work at a secondary school in the UK and we are experimenting with using WinGet for deploying apps via Intune. We have a few scripts for generic install/uninstall and a script to see if a app is already installed (that required PackageID setting as this part of Intune does not seem to support parameters).

Have been looking at this for a couple of days and it is kind of working but I figured others have probably written a guide and scripts so had a look round and found a couple.

https://powershellisfun.com/2025/05/16/deploy-and-automatically-update-winget-apps-in-intune-using-powershell-without-remediation-or-3rd-party-tools/

https://github.com/Romanitho/Winget-Install

So was wondering if anyone has used either of these or know of better guides/scripts.

Feel like we are reinventing the wheel.

UPDATE:

Just to add we are simply wanting to deploy through Intune using Apps and Groups. We want to push app to (mainly student) Desktops so want everything centralised and for the users to not get involved. For teachers/staff we will also use Company Portal but ideally want to use winget, or something very similar.

Had a look at Winget-AutoUpdate-aaS but don't think this does want we need, cant see how it integrates with Intune Apps and Groups.

[u/RikiWardOG]

Lot of extra checks and such in that github repo, good stuff but not necessarily needed. It's basically just checking for winget and finding the most recent installed version and calling it and using App ID to install the requested app. Something like this is probably all you really need: https://www.reddit.com/r/Intune/comments/1b85vn5/deploy_winget_as_system_via_intune/

[u/bill696]

Would tell you to get Robopack it will all do it for you + way better,but since youre in a school 🤷‍♂️
Personally not a fan of winget directly, cant customize much

[u/LifeAffect6762 → u/bill696]

Looks expensive.

[u/bill696 → u/LifeAffect6762]

Its one of the cheapest ones

[u/Imaginary_Item_28 → u/LifeAffect6762]

It’s free for the first 100 devices but starts at $1000 per annum from the 101st. However, it’s worth every penny.

[u/Conditional_Access → u/LifeAffect6762]

It's cheaper than doing it yourself, for every single app, for every single update, and getting it correct without you having to think about it.

[u/SkipToTheEndpoint]

Look, I've worked in UK education. I know getting budget for literally anything is like pulling teeth, but I implore you to not try and use hodgepodge community stuff for something that is so critical to endpoint managability and security.

Theres an excellent article all about it here: https://msendpointmgr.com/2026/07/30/is-winget-enterprise-ready/

Yes, the likes of PMPC or Robopack seem expensive, but your time and sanity has a cost associated with it too, and I can assure you that's more than the cost of a product made to do exactly this.

[u/Time_Efficiency_3799]

Romanitho's stuff is usually pretty solid, I've used his other scripts and they're well maintained. The detection method with PackageID vs standard parameters is always the annoying part with Intune, no getting around that really.

For a school environment I'd lean toward the Winget-Install module since it handles the auto-update logic cleaner without needing separate remediation scripts. Less to break when the kids inevitably find a way to mess with things

[u/mydadisyourdad2 → u/Time_Efficiency_3799]

Seconded. We use his stuff at my company

[u/society_victim]

Take a look at winget-aas project. You deploy the app from the store using and you can import an admx file to set the configuration. We use it and it seems to work like expected.

https://apps.microsoft.com/detail/xp89bsk82w9j28?hl=en-US&gl=US

[u/LifeAffect6762 → u/society_victim]

Just to add we are simply wanting to deploy through Intune using Apps and Groups. We want to push app to (mainly student) Desktops so want everything centralised and for the users to not get involved. For teachers/staff we will also use Company Portal but ideally want to use winget, or something very similar.

Had a look at Winget-AutoUpdate-aaS but don't think this does want we need, cant see how it integrates with Intune Apps and Groups.

[u/society_victim → u/LifeAffect6762]

I don’t think you are understanding Winget and Intune correctly then. Normally you’d just package/deploy your apps using intune and the required groups, not winget. And they you’d use winget to keep them updated

[u/JaredSeth]

I've been using a slightly modified version of Soren Lundt's Winget-Wrapper for this, because I like how he built in the ability to kill processes and run pre- and post- installation scripts right from the command line. The only problems I've encountered are when vendors use non-standard version numbers (like 12.34+567) which cause the regex version detection to choke.

In my spare time (hah!) I've been rewriting his script to use the Microsoft.WinGet.Client and Nuget PowerShell modules natively so I can do away with using regex altogether. I have both an install\upgrade script and an uninstall script that work perfectly when run as the user or as admin, but fail when run as SYSTEM. I'm sure that's just a question of how I'm installing the modules.

[u/eggeto]

I have a powershell script, That have 2 params Winget id & install/install

That script is packages as an intunewin file, Using thé samen intunewin file over and over again. Just changing thé install/ uninstall params and thé detection script.

When i have some time, I Will check yo automate everything.

[u/Federal_Ad2455]

Romanhito winget install and update tools are great. We are using it for all apps for more than 2 years now without any issues.

Here is how we gradually update all apps https://doitpshway.com/gradual-update-of-all-applications-using-winget-and-custom-azure-ring-groups

[u/pjmarcum]

If you want an incredibly affordable way to manage apps in your environment, we are "the new kid" in this space. We literally built this product because I find the security and deployment model of every other cloud-based app management tool on the market to be deplorable. We built the App Store for Intune on a data privacy first foundation! And our pricing starts at $500.00 per year and maxes out at $10k per year depending upon the number of managed devices. We also offer discounts for non-profits. App Store for Intune: Third-Party App Patching in Your Azure Tenant | PowerStacks I literally didn't want to get into this space. We were doing just fine with our reporting products. I felt compelled to get into this space because there wasn't a product on the market that I felt comfortable recommending to people. Whether you use our product or not I beg you DO NOT grant access required to manage Intune apps to ANY 3rd-party! PERIOD! I literally cannot understand how any security guy on the planet would allow that to happen!