Win32 App Deployment Requirements in Intune
Which THREE of the following are requirements for deploying a Win32 app via Microsoft Intune?
Quick Answer
The answer is that the Win32 app must be packaged in the .intunewin format, have detection rules configured, and be assigned to groups. These three requirements are non-negotiable because the .intunewin wrapper is how Intune compresses and indexes the installer files, detection rules verify successful installation on the device, and group assignments target the deployment to specific users or devices. On the MD-102 exam, this question tests your understanding of the Win32 app deployment workflow, often appearing as a multiple-select trap where incorrect options suggest hosting the app externally or requiring a separate agent. A common pitfall is confusing the Intune Management Extension—which handles installation automatically—with a third-party agent. Remember the three pillars: Package, Detect, Assign. For a quick memory tip, think “PDA” (Package, Detect, Assign) to recall the core requirements for any Win32 app deployment via Intune.
⚠ Common exam trap
Many candidates confuse the automatic installation of the Intune Management Extension with a manual prerequisite, or assume that Win32 app files must be hosted externally rather than leveraging Intune's built-in cloud storage.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The app must be assigned to a group of users or devices.
Option C is correct because a Win32 app in Intune must be assigned to an Microsoft Entra ID user or device group (required, available, or uninstall intent) before it can be delivered to any endpoint. Option D is correct because Intune requires detection rules (file, folder, registry, MSI product code, or custom script) to determine whether the app is already installed and to report installation status. Option E is correct because Win32 apps must be wrapped with the Microsoft Win32 Content Prep Tool into the .intunewin package format before upload to Intune. Option A is not required because the Intune Management Extension is installed automatically on Windows devices when a Win32 app or PowerShell script is assigned, not installed separately by the admin. Option B is not required because the app content is uploaded to and hosted by Intune (or delivered via the CDN), not on an external web server.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The device must have the Intune Management Extension installed separately.
Why it's wrong here
The Intune Management Extension is installed automatically on enrolled Windows devices; no separate manual installation is required. It tempts because the extension does perform Win32 app and PowerShell script execution, but its deployment is handled by Intune itself, not by the administrator as a prerequisite.
- ✗
The app installation files must be hosted on an external web server.
Why it's wrong here
Intune hosts the installation files itself once packaged as an .intunewin file, so an external web server is unnecessary. It tempts because some deployment methods, such as PowerShell scripts or MSI installers, do reference external content locations, but Win32 app delivery uses Intune's own content distribution.
- ✓
The app must be assigned to a group of users or devices.
Why this is correct
A Win32 app must be assigned to a user or device group before Intune delivers it; without an assignment, no device receives the app. This is a mandatory requirement alongside the management extension and packaging.
- ✓
Detection rules must be configured to verify installation.
Why this is correct
Intune requires a detection rule so it can determine whether the Win32 app is already installed on a device, preventing repeated reinstallation and enabling accurate reporting of installation status. Without one, the app deployment cannot be created.
- ✓
The app must be packaged in the .intunewin format.
Why this is correct
The .intunewin format is mandatory because Intune's Win32 app pipeline requires the encrypted package produced by the Microsoft Win32 Content Prep Tool, which captures install and uninstall commands plus detection rules. Plain .msi or .exe files cannot be uploaded directly, so this satisfies the deployment prerequisite.
Go deeper
Related to this question
Learn chapter
Troubleshooting Device Enrollment and Management
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Win32 app
A Win32 app is a traditional Windows program that runs directly on a Windows PC, using the same system resources and displaying a standard window with menus and buttons.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on MD-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE of the following are required to deploy a Win32 app using Microsoft Intune?
medium- A.Product code
- ✓ B.Detection rule
- ✓ C.Return codes for success
- D.Dependencies
- ✓ E.Installation command
Why B: To deploy a Win32 app in Microsoft Intune, a detection rule (B) is mandatory because Intune must determine whether the app is already installed on the device, using methods such as MSI product code, file/folder existence, or a custom script. Return codes for success (C) are also required so Intune can interpret the exit code returned by the installer and correctly report the installation as succeeded, failed, or requiring a restart (e.g., 0 for success, 3010 for soft reboot). The installation command (E) is essential because Intune needs the exact command line (for example, msiexec /i "app.msi" /qn or setup.exe /silent) to actually install the Win32 app on the target device. Product code (A) is not universally required, since it is only one possible detection method and can be replaced by file, folder, or script-based detection. Dependencies (D) are optional, as they are only needed when the app requires other apps to be installed first, and are not mandatory for every Win32 app deployment.
Variation 2. Which TWO of the following are prerequisites for deploying a Win32 app via Microsoft Intune?
medium- ✓ A.The app must be packaged using the Microsoft Win32 Content Prep Tool.
- B.The device must be running Windows 10 version 1803 or later.
- ✓ C.The device must have the Intune Management Extension installed.
- D.The device must be Azure AD joined.
- E.The device must have the Company Portal app installed.
Why A: Option A is correct because Win32 apps in Intune must be wrapped into the .intunewin format using the Microsoft Win32 Content Prep Tool (IntuneWinAppUtil.exe) before they can be uploaded and deployed. Option C is correct because the Intune Management Extension (IME) is the agent on the Windows device that actually downloads, installs, and reports on Win32 apps; it is installed automatically when a Win32 app or PowerShell script is assigned to the device. Option B is not required as a stated prerequisite in this context, since Win32 app support depends on the IME and supported Windows builds rather than a specific 1803 minimum being the defining prerequisite. Option D is not required because devices can be enrolled via co-management, group policy, or other methods and still receive Win32 apps, not strictly Azure AD joined only. Option E is not required because the Company Portal app is used for user-initiated installs and is not a prerequisite for Win32 app deployment via the IME.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.