Using 1 Intune to rule all Winget Apps

08-09-2023 – Updated the Scripts. I found 1 issue about source agreements
11-09-2023 – Script is not working with Zoom (System)

On the internet I see a lot of scipts to use Winget with the use of Task scheduler to update all.

For the company that I work for there apps that may not be updated. So I need to specify the update apps.

With the use of the 2 sites below I created 1 Script to .intunewin

Use Winget with Intune – NielsKok.Tech

Install | Deploy | Use Winget | System context | Intune (call4cloud.nl)

You need the Win32App packaging tool.

Generate with IntuneWinAppUtil this script below.
The rest is explained on the Internet

Then you can use this Install Command: powershell -executionpolicy bypass -file IntuneWinget.ps1 -Install <Winget.ID>

To Uninstall command: powershell -executionpolicy bypass -file IntuneWinget.ps1 -Uninstall <Winget.ID>

Example:
powershell -executionpolicy bypass -file IntuneWinget.ps1 -Install VideoLAN.VLC

powershell -executionpolicy bypass -file IntuneWinget.ps1 -Uninstall VideoLAN.VLC

Param(
    [switch]$Install,
    [switch]$Uninstall,
    $PackageName
)

if ($Install) {
$AppInstaller = Get-AppxProvisionedPackage -Online | Where-Object DisplayName -eq Microsoft.DesktopAppInstaller

#Start Logging
Start-Transcript -Path "C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\$($PackageName)_Install.log" -Append

If($AppInstaller.Version -lt "2022.506.16.0") {

    Write-Host "Winget is not installed, trying to install latest version from Github" -ForegroundColor Yellow

    Try {
    Write-Host "Creating Winget Packages Folder" -ForegroundColor Yellow

        if (!(Test-Path -Path C:\ProgramData\WinGetPackages)) {
            New-Item -Path C:\ProgramData\WinGetPackages -Force -ItemType Directory
        }

        Set-Location C:\ProgramData\WinGetPackages

#Downloading Packagefiles
        #Microsoft.UI.Xaml.2.7.0
        Invoke-WebRequest -Uri "https://www.nuget.org/api/v2/package/Microsoft.UI.Xaml/2.7.0" -OutFile "C:\ProgramData\WinGetPackages\microsoft.ui.xaml.2.7.0.zip"
        Expand-Archive C:\ProgramData\WinGetPackages\microsoft.ui.xaml.2.7.0.zip -Force
        #Microsoft.VCLibs.140.00.UWPDesktop
        Invoke-WebRequest -Uri "https://aka.ms/Microsoft.VCLibs.x64.14.00.Desktop.appx" -OutFile "C:\ProgramData\WinGetPackages\Microsoft.VCLibs.x64.14.00.Desktop.appx"
        #Winget
        Invoke-WebRequest -Uri "https://github.com/microsoft/winget-cli/releases/latest/download/Microsoft.DesktopAppInstaller_8wekyb3d8bbwe.msixbundle" -OutFile "C:\ProgramData\WinGetPackages\Winget.msixbundle"
        #Installing dependencies + Winget
        Add-ProvisionedAppxPackage -online -PackagePath:.\Winget.msixbundle -DependencyPackagePath .\Microsoft.VCLibs.x64.14.00.Desktop.appx,.\microsoft.ui.xaml.2.7.0\tools\AppX\x64\Release\Microsoft.UI.Xaml.2.7.Appx -SkipLicense

        Write-Host "Starting sleep for Winget to initiate" -Foregroundcolor Yellow
        Start-Sleep 2
    }
    Catch {
        Throw "Failed to install Winget"
        Break
    }

    }
Else {
    Write-Host "Winget already installed, moving on" -ForegroundColor Green
}


#Trying to install Package with Winget
IF ($PackageName){
    try {
        Write-Host "Installing $($PackageName) via Winget" -ForegroundColor Green

        $ResolveWingetPath = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe"
        if ($ResolveWingetPath){
               $WingetPath = $ResolveWingetPath[-1].Path
        }
    
        $config
        cd $wingetpath
        $InstalledApps = .\winget.exe list --id $PackageName --accept-source-agreements --accept-package-agreements

        if ($InstalledApps -eq "No installed package found matching input criteria.") {
             Write-Host "$($PackageName) is not installed"
               .\winget.exe install $PackageName --silent --accept-source-agreements --accept-package-agreements }
        else {}
       
        
        


$content = @"
# Goto Winget install dir
cd "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe"
.\winget.exe upgrade $PackageName --silent --force --accept-package-agreements --accept-source-agreements 
#### Remove shortcut on public desktop.
    Get-childitem -Path "C:\Users\Public\Desktop\*.lnk" -recurse | where-object {$_.lastwritetime -gt (get-date).addDays(-1) -and -not $_.PSIsContainer} | Remove-Item -Force
    
"@

# create custom folder and write PS script
$path = $(Join-Path $env:ProgramData IntuneScripts)
if (!(Test-Path $path))
{
New-Item -Path $path -ItemType Directory -Force -Confirm:$false
}
Out-File -FilePath $(Join-Path $env:ProgramData IntuneScripts\$PackageName.ps1) -Encoding unicode -Force -InputObject $content -Confirm:$false
 
# register script as scheduled task
$Time = New-ScheduledTaskTrigger -AtLogOn
$User = "SYSTEM"
$Action = New-ScheduledTaskAction -Execute "powershell.exe" -Argument "-ex bypass -file `"C:\ProgramData\IntuneScripts\$PackageName.ps1`""
Register-ScheduledTask -TaskPath "INTUNE" -TaskName "Upgrade$PackageName" -Trigger $Time -User $User -Action $Action -Force
Start-ScheduledTask -TaskPath "INTUNE" -TaskName "Upgrade$PackageName"

    }
    Catch {
        Throw "Failed to install package $($_)"
    }
#### Remove shortcut on public desktop.
Get-childitem -Path "C:\Users\Public\Desktop\*.lnk" -recurse | where-object {$_.lastwritetime -gt (get-date).addDays(-1) -and -not $_.PSIsContainer} | Remove-Item -Force


}
Else {
    Write-Host "Package $($PackageName) not available" -ForegroundColor Yellow
}
Stop-Transcript
}






















if ($Uninstall) {

#Start Logging
Start-Transcript -Path "C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\$($PackageName)_Uninstall.log" -Append

#Detect Apps
$InstalledApps = winget list --id $PackageName

if ($InstalledApps) {
    
    Write-Host "Trying to uninstall $($PackageName)"
    
    try {        
        $ResolveWingetPath = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe"
        if ($ResolveWingetPath){
               $WingetPath = $ResolveWingetPath[-1].Path
        }
    
        $config
        cd $wingetpath

        .\winget.exe uninstall $PackageName --silent --accept-source-agreements --accept-package-agreements

        
    ## Remove scheduled Task
    Write-Host "Trying to remove Upgrade$($PackageName) Scheduled Task"
    Unregister-ScheduledTask -TaskName "Upgrade$PackageName" -Confirm:$false

    ## Remove PS 
    Write-Host "Trying to remove Powershell Script"
    $todelete = Join-Path $env:ProgramData IntuneScripts\$PackageName.ps1 
    Remove-Item -Path $todelete -Recurse -Force

    }
    catch {
        Throw "Failed to uninstall $($PackageName)"
    }
}
else {
    Write-Host "$($PackageName) is not installed or detected"
}

Stop-Transcript



}
Remove-Variable * -ErrorAction SilentlyContinue

The only script that needs to be change is the detection script.
Change the $PackageName = “<Winget.id>” to the correct one

#Fill this variable with the Winget package ID
$PackageName = "VideoLAN.VLC"

#Start Logging
Start-Transcript -Path "C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\$($PackageName)_detect.log" -Append 

try {
Write-host "Checking Winget Path"
$ResolveWingetPath = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe"
    if ($ResolveWingetPath){
           $WingetPath = $ResolveWingetPath[-1].Path
    }

$config
Write-host $ResolveWingetPath
Write-Host $WingetPath
cd $wingetpath


$CheckPSUpdate = Join-Path $env:ProgramData IntuneScripts\$PackageName.ps1
$CheckDir = Test-Path $CheckPSUpdate

Write-Host $CheckDir 


$InstalledApps = .\winget.exe list --id $PackageName --accept-source-agreements --accept-package-agreements
}
Catch { 
    Throw "Failed to detect $($PackageName)"
    }

if ($InstalledApps -eq "No installed package found matching input criteria.") {
    Write-Host "$($PackageName) is not installed"
    Stop-Transcript
    Exit 1
}


else {
If ($CheckDir -eq $False)
        {
        Write-Host "$($PackageName).ps1 not found"
        Stop-Transcript
        Exit 1
        }



    
}

If you need more Info let me know.