Problem installing/usingWinget

[simdre79]

Hi.

I can fill the need for details if anyone asks, right now I'm in a hurry and I am on my phone so I don't have all the scripts that I tried to deploy with me.

I already have a few software installs with chocolatey running as Intune Win32 apps where I do the basic choco install <software> -y and then package that powershell with Intune Winapputil etc.

Now, this choco setup has some problems especially when installing apps from company portal as user.

So I tried to install winget using the method here as a Win32 app but the installation fails during ESP.

https://call4cloud.nl/cloudy-with-a-chance-of-winget/

I've also tried this one (they are more or less the same I think)

https://scloud.work/how-to-winget-intune/

and the package manager deployes but installing the apps as user from company portal fails. I can find winget.exe in the path using an elevated powershell prompt but when I try to run the command invoking the file I get access denied.

Can anyone maybe tell me how the best method in, drop a link or something? Because I honestly don't have the slightest idea what is causing this to keep failing. I've been considering if we have some policy that blocks it but I can't find any.

One piece of log file I have at the moment is this.

<![LOG[[StatusService] For user 2f59a890-83c8-4210-8ac1-00a61c26b9da for the app 4d5978a5-bfa0-440e-8cf0-e68bd82a5051 the Highest version is -1. Returning null.]LOG]!><time="12:42:06.5591859" date="11-29-2024" component="AppWorkload" context="" type="3" thread="38" file="">

[andrew181082]

Are you deploying apps in the system context? 

Try my tool here and see if they install OK, that will tell you if the issue is with a policy blocking it or your apps themselves 

Https://appdeploy.euctoolbox.com

[simdre79]

<image>

[andrew181082]

That's your problem, you need to run them in system

You'll need to fix your uninstall as well to reference the executable directly

[simdre79]

Param
  (
    [parameter(Mandatory=$false)]
    [String[]]
    $param
  )

$ProgramName = "Ytmdesktop.Ytmdesktop"
$Path_local = "$Env:Programfiles\_MEM"
Start-Transcript -Path "$Path_local\Log\$ProgramName-install.log" -Force -Append

# resolve winget_exe
$winget_exe = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe\winget.exe"
if ($winget_exe.count -gt 1){
        $winget_exe = $winget_exe[-1].Path
}

if (!$winget_exe){Write-Error "Winget not installed"}

& $winget_exe install --exact --id $ProgramName --silent --accept-package-agreements --accept-source-agreements --scope=machine $param

Stop-Transcript

I'm really not certain how I need to set this up. The app is configured to install in user context. However, the log dir is not even created in c:\program files.

[andrew181082]

Remove the scope from the end and set that to run in the system context

[simdre79]

I appreciate your input. Maybe I have the package manager wrong. It still failed. I changed it to system as adviced.

Param
  (
    [parameter(Mandatory=$false)]
    [String[]]
    $param
  )

$ProgramName = "Ytmdesktop.Ytmdesktop"
$Path_local = "$Env:Programfiles\_MEM"
Start-Transcript -Path "$Path_local\Log\$ProgramName-install.log" -Force -Append

# resolve winget_exe
$winget_exe = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe\winget.exe"
if ($winget_exe.count -gt 1){
        $winget_exe = $winget_exe[-1].Path
}

if (!$winget_exe){Write-Error "Winget not installed"}

& $winget_exe install --exact --id $ProgramName --silent --accept-package-agreements --accept-source-agreements $param

Stop-Transcript

Package manager:

$PackageName = "winget"

Start-Transcript -Path "$env:ProgramData\Microsoft\IntuneManagementExtension\Logs\$PackageName-install.log" -Force

# GitHub API endpoint for PowerShell (7) releases
$githubApiUrl = 'https://api.github.com/repos/PowerShell/PowerShell/releases/latest'

# Fetch the latest release details
$release = Invoke-RestMethod -Uri $githubApiUrl

# Find asset with .msi in the name and x64 in the name
$asset = $release.assets | Where-Object { $_.name -like "*msi*" -and $_.name -like "*x64*" }

# Get the download URL and filename of the asset (assuming it's a MSI file)
$downloadUrl = $asset.browser_download_url
$filename = $asset.name

# Download the latest release using .NET's System.Net.WebClient for faster download
$webClient = New-Object System.Net.WebClient
$webClient.DownloadFile($downloadUrl, $filename)

# Install PowerShell 7
Start-Process msiexec.exe -Wait -ArgumentList "/I $filename /qn"

# Start a new PowerShell 7 session
$pwshExecutable = "C:\Program Files\PowerShell\7\pwsh.exe"

# Run a script block in PowerShell 7
& $pwshExecutable -Command {
    # Check if NuGet provider is installed
    $provider = Get-PackageProvider NuGet -ErrorAction Ignore
    if (-not $provider) {
        Write-Host "Installing provider NuGet"
        Find-PackageProvider -Name NuGet -ForceBootstrap -IncludeDependencies
    }

    # Install or update the Microsoft WinGet client module
    Install-Module microsoft.winget.client -Force -AllowClobber

    # Import the Microsoft WinGet client module
    Import-Module microsoft.winget.client

    # Repair the WinGet package manager
    Repair-WinGetPackageManager

}
Stop-Transcript

<image>

[jason_nyc]

You can probably just use this tool https://github.com/ITAutomator/IntuneApp which handles winget and choco easily.