Deploying Large Applications using Microsoft Intune (2024)

Deploying Large Applications using Microsoft Intune (1)

By Johan Arwidmark /August 26, 2022

In late July, I was asked to do a Proof-Of-Concept (POC) for one of our customers regarding Intune and deployment of large applications. Basically, they wanted to know how well Intune would work with application sizes in the 5 – 20 GB range. Obviously, this story is not going to end well, but please read on…


Long story short: While you can request support for larger than 8 GB applications in Microsoft Intune, the platform is not very good at handling apps larger than 2-3 GB in general, and sometimes not even that, depending on your Internet connection, Delivery Optimization (DO) settings, and availability of cache servers. Read on for more info and workarounds….

Increasing the default Win32 application size limit

If you have been deploying applications with Microsoft Intune for more than four minutes, you probably know that the default max size is 8 GB per application. This limit can be increased by submitting a support case from your Intune tenant. Long story short, case submitted, business impact/reason provided, and three weeks later, our tenant was upgraded to support 30 GB per application. My fastest Intune support case yet…

Deploying Large Applications using Microsoft Intune (2)

Step #1 – Creating the Intune package

Creating a large Win32 package using the Content Prep Tool (IntuneWinAppUtil.exe) is no different from creating a small one, except for it takes a bit longer. Just make sure to use version of the tool or later since earlier version had a bug when creating packages over 4 GB.

For this test I created an Intune package of Adobe Suite 2022. Using the IntuneWinAppUtil.exe it took about 20 minutes to create the package. It's not the fastest tool, but in all fairness, it does a decent job using a standard Zip compression, and also encrypts the package. The resulting size is only 0.5 GB larger than a 7-Zip archive of the same folder (19.9 GB vs 20.4 GB).

Deploying Large Applications using Microsoft Intune (3)

Step #2 – Creating the Win32 App in Intune

Next step was to create the Win32 App in Intune, which also uploads the package as part of the process. And this is where my problems started. My Internet connection when doing this POC only had 20 Mbit upload, and the IntuneWin32App PowerShell module from Nickolaj Andersen (@NickolajA), that I typically use to create the packages, would timeout after 15 minutes due to the authentication token not being refreshed during the upload.

To upload the package faster, I decided on subscribing to a Windows 365 Cloud PC with 4 GB RAM, and 256 GB Disk. Subscribing to the Cloud PC only took a few minutes, but it took 5 days for Windows 365 to actually provision it. I'm assuming due to heavy load or bugs on the Windows 365 platform, because the support person that responded to my ticket had no clue whatsoever. Anyway, once I had the Cloud PC, I synced the Intune package via OneDrive to the Cloud PC, and then uploaded it from there. But even though I got about 130 Mbit upload when uploaded from the Cloud PC, the IntuneWin32App PowerShell module would still time out due to token refresh. So, I ended up uploading the Intune Package via the MEM portal, from the Cloud PC, which went fairly quick. I guess you can call the Cloud PC UaaS (Upload as a Service). 🙂

Now the good news: In the midst of all this, Mr. Jose (@schenardie) reached out to me, offering his help to create a fork of the IntuneWin32App PowerShell module that used AzCopy.exe to upload the package, including a token refresh. Happiness! With the updated module I could create the Win32 App from both the MEM portal and PowerShell. Yay!

Total Win32 App creation time of Adobe Suite 2022 from my Cloud PC was 2 hours and 4 minutes.

Note #1: You may have to test different upload caps values (–cap-mbps) in the Invoke-AzcopyBlobUpload.ps1 script.

Note #2: A good 20 minute of the above times is the machine preparing the package for upload.

Note #3: When uploading the Intune package via the MEM portal on my Cloud PC, I got about 140 mbit upload speed.

Step #3 – Deploying Adobe Suite 2022 using Intune

As if I hadn't had my fair share of problems along the way already, actually deploying the 20 GB Adobe Suite application from Intune turned out to be a royal pain. Intune have a default download timeout of 10 minutes, and unless my client has about 300 mbit dedicated download speed, there is no way a 20 GB package will download in that time.

Deploying Large Applications using Microsoft Intune (4)

What happens when the timeout is reached is that the download stops, and the client will continue to download later, much later. In my first attempts it took about 2 days to get the package down over a 60 mbit link. By poking the registry keys for the app, I could force it to download all 20 GB in a few hours, but it would be nice if Intune offered a setting to increase that initial download time. For the fun of it, I did submit a support case on this issue, but nothing useful have emerged yet from that.

It's also fascinating to see how DO is downloading multiple 1 MB blocks from multiple sources. Here is a ProcMon trace I was running during download:

Deploying Large Applications using Microsoft Intune (5)

Step #4 – Speeding up Things

While the initial download can be quite slow, the more clients that downloads the package, the faster the local sharing via DO will be. Also, you can leverage the use of a local Microsoft Connected Cache server for the Win32 apps that will improve performance. Here is the Adobe Suite 2022 package inside the MCC cache on one of our cache servers:

Real World Note: MCC won't cache Intune content like Win32 apps until it's been requested at least three times, so don't be surprised if it does not start caching immediately 🙂

Here is a post on how to setup a Microsoft Connected Cache server and monitor the results:

Setup Microsoft Connected Cache (MCC) for Windows Autopilot / Win32 App Deployments

Deploying Large Applications using Microsoft Intune (6)
Deploying Large Applications using Microsoft Intune (7)
Deploying Large Applications using Microsoft Intune (2024)


What is the size limit for Intune app deployment? ›

For more information and steps, see Add, assign, and monitor a Win32 app in Microsoft Intune. Windows application size is limited to 30 GB per app.

What all types of apps can be deployed using Intune? ›

Intune supports various app types, such as store apps, web apps, and line-of-business (LOB) apps. Intune also supports several platforms, such as iOS/iPadOS and Android.

How long does Intune app deployment take? ›

TL;DR Intune Apps and Settings can take between 20-30 minutes to deploy on new devices using standard deployment methods. You can reduce this to almost instant deployments (under 2 minutes), skip to the solution if you don't care about background.

What are the limitations of Intune? ›

Intune device limit restrictions

You can allow a user to enroll up to 15 devices. To create a device limit restriction, sign in to the Microsoft Intune admin center and go to Devices > Enrollment. For more information, see Create a device limit restriction.

What are the limitations of Intune remote help? ›

Remote Help isn't supported on GCC High or DoD (U.S. Department of Defense) tenants. For more information, go to Microsoft Intune for US Government GCC High and DoD service description. You cannot establish a Remote Help session from one tenant to a different tenant.

Can Intune install 3rd party apps? ›

Select the required third-party application that you wish to create in Intune/MEM, customize the deployment with pre/post scripts if required, and click 'Create Application' option. Now, you can see that the selected third-party application is created in the Apps section under Client Apps.

Can Intune install apps automatically? ›

By default, our service will automatically assign the latest version and remove assignments from the previous version. This setting allows you always to deploy the latest versions of applications using the company portal application.

Can Intune see what apps are installed? ›

Discovered apps is a separate report from the app installation reports. For personal devices, Intune never collects information on applications that are unmanaged. On corporate devices, any app whether it's a managed app or not is collected for this report.

What is the difference between SCCM and Intune? ›

Both Intune and SCCM can do the following tasks, but they accomplish these tasks in different ways since Intune is cloud-based and SCCM is agent-based: Manage applications: Intune and SCCM can update, install, or uninstall applications on end user devices.

Does Intune automatically update apps? ›

When apps are deployed using Intune, most apps are automatically updated when there's an app update available. So, it's recommended to use Intune to deploy apps used by your organization.

How often does Intune try to install apps? ›

One of the common methods for deploying applications to users is the use of a Win32 App. However, a common issue that can occur when setting up new computers or trying to deploy an app is that if the app fails to install, it takes 24-72 hours before Intune will attempt to install the app again.

How many times do Intune scripts run? ›

Once the script executes, it doesn't execute again unless there's a change in the script or policy. If the script fails, the Intune management extension agent retries the script three times for the next three consecutive Intune management extension agent check-ins.

How often do computers check in with Intune? ›

By default, Intune devices check in every 8 hours and the Last check-in value also updates every 8 hours in the Intune portal.

What is the size limit for Azure app Service container? ›

The maximum size for a deployable container image on Azure Container Instances is 15 GB.

What is the limit of Intune service? ›

There is a maximum limit of 20,000 devices in a single Windows Intune subscription account. Organizations may choose to have multiple accounts if they need to manage more than 20,000 devices. A User Subscription License (USL) is required to enable the functionality of an Online Service for a user.

What is the maximum deployment slots in app service plan? ›

For the Standard App Service plan, Azure allows up to 5 deployment slots in addition to the production slot.

How do I increase my Intune device limit? ›

Sign in to the Microsoft Intune admin center. Go to Devices > Enrollment restrictions > Default (under Device limit restrictions) > Properties > Edit (next to Device limit) > increase the Device limit (maximum 15)> Review + Save.

Top Articles
Latest Posts
Article information

Author: Tyson Zemlak

Last Updated:

Views: 6482

Rating: 4.2 / 5 (43 voted)

Reviews: 90% of readers found this page helpful

Author information

Name: Tyson Zemlak

Birthday: 1992-03-17

Address: Apt. 662 96191 Quigley Dam, Kubview, MA 42013

Phone: +441678032891

Job: Community-Services Orchestrator

Hobby: Coffee roasting, Calligraphy, Metalworking, Fashion, Vehicle restoration, Shopping, Photography

Introduction: My name is Tyson Zemlak, I am a excited, light, sparkling, super, open, fair, magnificent person who loves writing and wants to share my knowledge and understanding with you.