Share via

Detection rule for Intune per-user win32 app install

Joe H 96 Reputation points
2020-10-22T14:33:16.797+00:00

What do you usually use for a detection rule for a win32 application that installs using user install behavior into the user's profile? I tried looking for a file using %localappdata%, but even though the application was installed in the currently logged in user's profile, Intune resolved %localappdata% to the system profile (C:\Windows\system32\config\systemprofile).

Microsoft Security | Intune | Application management

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Crystal-MSFT 54,306 Reputation points Microsoft External Staff
    2020-10-23T05:01:29.31+00:00

    @Joe H , For the detection rule, we can choose either of MSI, File, Registry. Any one can work. We can see more details in the following link:
    https://learn.microsoft.com/en-us/mem/intune/apps/apps-win32-add#step-4-detection-rules

    From your description, I know the variable did not point eh user you want. This is because when the detection method runs, it will run in the SYSTEM context..at which point the variable means nothing because the system is the "logged on" user. A similar issue in the following link:
    https://social.technet.microsoft.com/Forums/en-US/3fd796c4-45f0-42cf-bc3d-bccd6caf73a8/detection-method-using-userprofile-in-the-path?forum=configmanagerapps

    Given the situation, we suggest to try other method like registry.

    Hope it can help.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.