14-day trial, no credit cardStart now
PermitUSB
Sign inStart free trial

Microsoft Intune deployment

For cloud-managed Windows fleets, deploy PermitUSB as a Win32 app through Intune.

DeploymentCloud-managed fleets

Prerequisites

  • A Microsoft Intune license
  • The IntuneWinAppUtil.exe content prep tool
  • PermitUSB.msi
  • An enrollment token from the dashboard

Package the MSI

Place the MSI in a folder, then run the prep tool. It produces PermitUSB.intunewin.

IntuneWinAppUtil.exe -c <folder> -s PermitUSB.msi -o <output-folder>

Upload to Intune

  1. Intune admin center, then Apps, Windows, Add, Windows app (Win32)
  2. Upload the .intunewin
  3. Set the install command (below)
  4. Uninstall command: msiexec /x {product-code} /qn
  5. Detection rule: MSI product code, which Intune detects from the .intunewin automatically
  6. Assignments: required, scoped to your target group
msiexec /i PermitUSB.msi /qn TENANT_TOKEN="<token>"

Verification

Intune deploys at the next sync cycle, typically within an hour of assignment. Watch the Endpoints page, and check per-device install status in Intune for failures.

Per-device targeting

For different endpoint groups across teams, create a separate Intune app per group with the matching ENDPOINT_GROUP property, and assign each app to the right Entra ID group.

Something missing or wrong here? Tell us. Documentation gaps get filled fast.