PSAppDeployToolkit
PSAppDeployToolkit is a PowerShell-based, open-source framework for Windows software deployment that integrates with major deployment solutions (including Microsoft Intune). It provides a prescriptive deployment workflow, a rich library of functions, a customizable UI (Fluent or Classic), and full-fidelity logging to drive high deployment success rates. It enables complex, secure, user-friendly deployments across enterprise environments.
Security Analysis
50 files scanned on Jan 12, 2026
The codebase largely consists of standard AppDeployToolkit invocations appropriate for Intune. The primary security concern is the use of PsExec-based SYSTEM-level execution in silent installation/repair scripts, which can be a vector for privilege escalation if misused. No evidence of obfuscated code, credential harvesting, data exfiltration, hardcoded secrets, or remote code fetching in the provided segments. Ensure proper auditing, signed binaries, and compliance with enterprise deployment policies when using elevated tools such as PsExec.
Swipe to see more
You might also like
Wintuner GUI
WinTuner GUI is a modern PowerShell-based graphical interface for managing Microsoft Intune Win32 apps via WinGet packages. Search WinGet packages, create .wtpackage files, and deploy them to Intune, with update checks for existing apps. Features include fuzzy app discovery, persistent settings, interactive M365 login, and a JSON settings store for end-to-end Intune app lifecycle management.
Manuel HöflerWintuner
WinTuner is a tool that lets you take any WinGet app and upload it to Intune in minutes. It automates downloading the installer and logo, generates the intunewin package, creates the required deployment script details, and publishes the app to Intune. It also ships a PowerShell module for automation and includes documentation to guide you through the process.
Stephan van RooijDriver Automation Tool
Driver Automation Tool is a PowerShell WPF desktop app that automates the full lifecycle of OEM driver and BIOS package management for ConfigMgr and Intune. It automatically discovers vendor catalogs, downloads with resume-enabled curl, extracts, builds WIMs, and wraps packages as .intunewin for Intune Win32 deployment. The tool supports multiple OEMs, BIOS update handling, hash verification, and configurable packaging (DISM/wimlib/7-Zip) to streamline ConfigMgr and Intune workflows.
Maurice DalyWinGet-PSADT-GUI-Tool
WinGet-PSADT-GUI-Tool is a Windows PowerShell WPF GUI that streamlines Win32 app packaging and Intune deployment. It integrates WinGet search, installer download, PSADT scaffolding, and GUI-driven configuration of install/uninstall/repair logic, enabling generation of .intunewin packages and direct upload to Intune via Microsoft Graph. It outputs standard PSADT/Intune artifacts and provides live monitoring of packaging and upload steps.
Dhiraj Dhote