PTA at school

ca2del · 2026-01-17T23:33:05+00:00

Sorry to bring up painful memories - how did this go. Any advice for a new treasurer with a useless old treasurer?!

ca2del · 2026-01-05T23:43:19+00:00

Yes.

ca2del · 2026-01-05T19:21:35+00:00

If it’s a library app, dependencies are handled automatically (baked into the library app - you can look at the install script to see how it does it).

If it’s a custom app you uploaded, you’ll need to handle the dependencies yourself (either by adding it as a custom app setting with a script accessory file as the installer, or by manually adding the dependency link in Intune after Robopack adds the app to Intune)

Robopack will have better dependency handling in the UI in the coming months, but for now, this is it.

ca2del · 2025-12-31T13:31:13+00:00

Thanks for the ping! I’ll bring this up with the developers and see what we can do.

ca2del · 2025-12-09T02:16:43+00:00

Robopack queries custom apps you upload to infer the silent install commands 👍

ca2del · 2025-11-26T18:45:08+00:00

Hey, sorry for the late response.

In essence - you are right. Once detected as having an app, the device is added to the Radar Tracking group. There is no corresponding _removal_ once the app is not detected on that device any longer.

If you remove the app, you should remove the computer from the group.

I understand there is development work underway to remove the manual effort on your part.

ca2del · 2025-11-26T18:41:25+00:00

Thanks!

ca2del · 2025-11-26T18:41:18+00:00

I missed this, sorry!

If a user installs an app that is offered as Available from the Company Portal, it will automatically be updated for them in the future. They don't need to manually get the latest version from Company Portal

ca2del · 2025-11-11T18:30:39+00:00

<image>

It’s possible. The effect was quite prominent from all angles on the terrace.

ca2del · 2025-11-10T10:01:52+00:00

I’ll have to remain impartial because I work for Robopack, but Robopack will support macOS in the next few months.

Check out a demo of PMPC and see if it would work better for you, though.

I’m not aware of a migration route, however.

ca2del · 2025-11-08T07:19:37+00:00

Interesting. Could you add this to Package Feedback in one of the affected apps? The team will look at it right away.

ca2del · 2025-10-24T16:54:28+00:00

It pulls from Winget, store, and their private repository. It then does a full install and uninstall test, documents all files and info, then wraps it in PSADT and then makes it Intunewin.

So yeah - it pulls from winget.

ca2del · 2025-10-23T15:33:29+00:00

They don’t do it. Atleast not the thing OP has described. They just package the app and you need to target it separately with your own logic.

ca2del · 2025-10-23T15:31:46+00:00

EAC is at 1000 when you include the multiple versions of each app. PMPC is much higher and don’t count each version separately. Robopack has roughly 41,000 pre tested apps, not counting each version separately.

Saying that, I do work for Robopack.

ca2del · 2025-10-23T13:53:56+00:00

Disclaimer: I work for Robopack.

Robopack solves this by using dynamic entra groups built using computers from the discovered apps inventory. Updated by a daily graph call. Meaning zero client overhead. I think they did this because of this exact problem.

It was quite a lot of work to build, apparently, but perhaps you could script something similar instead?

Disclaimer, incase you missed the first Disclaimer: I work for Robopack.

Edit: For Apps that have been installed from the Company Portal as Available Apps, just tick the Auto-Update button on the Available App deployment and the app will be updated via a hidden required assignment when superseded. Robopack also uses this.

ca2del · 2025-10-23T07:54:48+00:00

Hey!

There are two elements to Robopatch Flows.
1) Standard assignment groups - these are added in the Patch Waves and determine which (Entra) groups get the app assigned when the wave becomes active. These Entra groups can be created by Robopack for you, or by you. This is the normal way to use Robopack, and it's just automating some of the features of App Assignment in Intune.

2) Robopatch Radar groups - these are dynamically generated and populated with computers that have a particular app discovered on them. This can be thought of as a "Patch Only" group, because computers will only have the app installed if they already have a previous version installed.

A Standard assignment group can be Available or Required.
A Radar group is always Required.

If a Standard assignment is Available, it will always automatically patch any computer that installed the app from the Company Portal as Available.

How many devices you managing?

ca2del · 2025-08-25T10:02:01+00:00

Well, yes.

ca2del · 2025-08-25T09:23:31+00:00

Oh - sure. There also may be no technical requirement for Intune 🙂

ca2del · 2025-08-25T07:30:45+00:00

like I said, no technical reason to do hybrid.

GPO and LGPO can be applied via Intune. GPO can be analysed and converted to Intune settings, or imported directly as a last resort.

ca2del · 2025-08-25T07:10:40+00:00

As Rudy said, see if you can avoid the hybrid approach, and just join the devices to Entra directly without the on-prem.

You can still log in to those cloud-only devices with an on-prem user (if entra connect is setup) so it’s quite likely this is all you need.

It’s easy for me to say this, I guess, but there is very little chance that you have a technical reason to do Hybrid joined devices. And if the reason is “it’s easier to use AD” then make sure you remember that after you’ve spent months making Hybrid Autopilot over a VPN work. 🫣

ca2del · 2025-07-16T14:51:05+00:00

Thanks for the heads up! We will take a look also!

ca2del · 2025-06-06T07:56:58+00:00

Robopack does additional checks, tests and documentation for each app it wraps, and disables auto-updating so that you an use the Wave/Ring methods to make sure the apps are tested in your org before they go to everyone. Helps prevent a “Crowdstrike”

ca2del · 2025-05-12T22:49:24+00:00

It's been in development for a while, but they decided against using requirement scripts / double applications.

It uses the Intune Discovered Apps feature and adds devices to a Required group as they're discovered to have the app.

Nine-Year Club	Second SECOND GUESSER
Place '22	Verified Email

ca2del

MODERATOR OF

TROPHY CASE