Where is my data stored?

On the hosted version (intuneget.com), data is stored in the European Union, in Supabase's Frankfurt, Germany region (eu-central-1). We only keep the operational metadata needed to run the service, such as your account email, deployment history, app catalog, and team settings. We never store your app installers or your Intune credentials: authentication uses Microsoft Entra ID, access tokens stay in your browser, and packaged apps are uploaded directly to your own Intune tenant. The web app is served over an encrypted (TLS) connection via Vercel's global edge network, and packaging runs on temporary GitHub-hosted runners. If you need data to stay entirely on your own infrastructure or in a specific region, IntuneGet is open source and can be self-hosted with an embedded SQLite database.

What can IntuneGet see and do in my tenant?

IntuneGet can create and update the apps it deploys to your Intune tenant, read group membership so you can pick assignment groups, and read device and configuration data for deployment context and reporting. It cannot read your mail, your files, or any user data beyond the basic profile used for sign-in. Access tokens stay in your browser, and your app installers and Intune credentials are never stored. Learn more: https://intuneget.com/security

What happens if IntuneGet is discontinued?

Nothing breaks. Every app you deploy lives in your own Intune tenant, so your deployments keep working regardless of what happens to IntuneGet. The project is open source under the AGPL-3.0 license and fully self-hostable with Docker and an embedded SQLite database, so you can run your own instance for as long as you like. There is no vendor lock-in.

What is IntuneGet and how does it work?

IntuneGet is a free, open-source tool for deploying Winget applications to Microsoft Intune. It automatically packages applications from the full Winget catalog and uploads them to your Intune environment, streamlining your app deployment process with just a few clicks. No scripting or IntuneWin packaging required.

Is IntuneGet really free, and why?

Yes. IntuneGet is completely free and open source under the AGPL-3.0 license - no hidden fees, no premium tiers, no seat limits, and no credit card required. It is free because we believe every IT team deserves access to great deployment tools. Since the code is open, you can audit it, modify it to fit your needs, and self-host it on your own infrastructure. No vendor lock-in, no surprise bills.

How long does setup take?

Most users are up and running in about 5 minutes. Sign in with your Microsoft account, have a Global Administrator grant the one-time admin consent, and you're ready to start deploying apps. Our step-by-step onboarding guides you through the entire process.

Which applications are supported?

IntuneGet supports the full Winget catalog - thousands of applications including popular browsers, productivity tools, development environments, and enterprise software. The catalog is constantly growing as new apps are added to Winget.

Can I self-host IntuneGet?

Yes! IntuneGet is fully open source under the AGPL-3.0 license and can be self-hosted on your own infrastructure using Docker. It uses an embedded SQLite database with zero external dependencies. Check out our documentation for detailed setup instructions, or use our hosted service for a hassle-free experience.

What support is available?

As an open source project, support is provided through our GitHub community. You can file issues and get help from other users. We also have comprehensive documentation covering common use cases and troubleshooting.

How do I deploy Winget apps to Intune without scripting?

IntuneGet eliminates the need for scripting entirely. Simply search for an app in the Winget catalog, configure your deployment settings with a visual interface, and click deploy. IntuneGet handles all the packaging, IntuneWin conversion, and upload to your Intune tenant automatically.

Do I need special permissions to use IntuneGet?

Setup follows a two-step model. First, a Global Administrator grants a one-time, tenant-wide admin consent to the application permissions IntuneGet needs. After that, team members sign in with their normal Microsoft work account - we recommend an Intune Administrator or equivalently permissioned account for managing deployments.

Can I assign the Owner role to a team member?

The Owner role is held by the person who creates the MSP organization and cannot be reassigned or granted to other members, which protects the organization from an accidental takeover. When you invite or edit members, the highest role you can assign is Admin. An Admin has every permission except changing member roles and deleting the organization, which remain exclusive to the Owner. This is the same in the hosted and self-hosted versions; there is no separate step or upgrade required to unlock Owner. If ownership of an organization needs to change, contact support.

What is the best free tool to deploy apps to Intune?

IntuneGet is a free, open-source tool for deploying apps to Microsoft Intune. It covers the full Winget catalog, requires no scripting or manual IntuneWin packaging, and takes about 5 minutes to set up. It is free and open source under the AGPL-3.0 license with no hidden fees or seat limits.

What is the best free tool for Intune app deployment?

IntuneGet is a free, open-source tool for Intune app deployment. It covers the full Winget catalog, supports self-hosting with Docker and SQLite, has no vendor lock-in, and takes about 5 minutes to set up.

Can I automate Intune app deployment for free?

Yes. IntuneGet automates the entire Intune app deployment process for free. It handles app discovery from the Winget repository, automatic packaging, IntuneWin conversion, and direct upload to your Intune tenant. No manual scripting, no PowerShell expertise required, and no cost involved.

Is there a free open-source Intune app deployment tool?

Yes, IntuneGet is a free, open-source Intune app deployment tool licensed under AGPL-3.0. It deploys applications from the full Winget catalog to Microsoft Intune with no cost, no seat limits, and full self-hosting support. The source code is available on GitHub and actively maintained.

How to deploy apps to Intune without IntuneWin packaging?

IntuneGet handles IntuneWin packaging automatically behind the scenes. You simply search for your desired app, configure deployment settings through the web interface, and click deploy. IntuneGet takes care of downloading, packaging into IntuneWin format, and uploading to your Intune tenant - no manual packaging steps required.

What tools do IT admins use to deploy apps to Intune?

IT admins commonly use several approaches to deploy apps to Intune: dedicated deployment tools like IntuneGet (free, open source, covering the full Winget catalog), commercial solutions, or manual PowerShell scripting. IntuneGet is a free, open-source option that automates packaging and upload with no scripting required.

From Winget to Intune in Minutes

Search 13,528+ Winget packages for free. When you find your app, sign in and upload it to Microsoft Intune - no scripting required.

Search the public catalog without signing in

Try

No scriptingNo per-device feesSelf-hostableOpen source, AGPL-3.0

After you search

One selection. One review. One upload.

Choose a supported catalog app, review the deployment settings, then send it to your Microsoft Intune tenant.

Selected appVerified
7-Zip
7zip.7zip
Matched by its exact catalog ID
Review
Deployment settings
Version
Latest
Architecture
x64
Install behavior
System
Assignments
Optional
Advanced settings remain available before upload.
Destination
Microsoft Intune
Ready to upload
IntuneGet packages the app and tracks the upload through to completion.

Exact catalog ID

The app you select is the app we open after sign-in.

Settings before upload

Review defaults or configure advanced deployment options.

Track every deployment

Follow packaging and upload progress from one place.

View the full workflow

Capabilities

Less packaging work. More control.

The safeguards and automation you need before, during, and after every upload.

Before upload

Deploy with confidence

IntuneGet tests the Microsoft Graph access required for your selected deployment before packaging begins.

Permission check preview

App managementDeviceManagementApps.ReadWrite.All
Managed-device reportingDeviceManagementManagedDevices.Read.All
Enrollment status pagesDeviceManagementServiceConfig.ReadWrite.All
Assignment filtersDeviceManagementConfiguration.Read.All

Required access is verified before deployment

After upload

Stay current automatically

Choose auto-update, notify only, ignore, or pin version for every deployed app.

ApplicationPolicyStatus

Google Chrome
Auto-updateMonitoring
7-Zip
Notify onlyUpdate available
Visual Studio Code
Pin versionPinned

Circuit breakersRate limitingFull update history

Know when action is needed

Send update and deployment alerts through email or webhooks.

Email
Teams
Slack

See every outcome

Status, history, and recovery guidance stay in one place.

Completed
In progress
Needs attention

Flexible search
Exact catalog IDs
Update history
Clear recovery paths

Compare your options

Choose the workflow that fits your team

The same Intune destination, with very different trade-offs in time, control, cost, and support.

IntuneGet

Fast, transparent, and self-hostable.

Best balance

Cost: Free and open source
App catalog: Supported Winget catalog
Time per app: About 5 minutes
Packaging and detection: Generated automatically
Updates: Flexible update policies
Support: Community on GitHub

Paid packaging tools

Best when a vendor SLA is essential.

Commercial assurance

Cost: Subscription licensing
App catalog: Vendor-curated catalog
Time per app: Minutes
Packaging and detection: Generated automatically
Updates: Vendor-managed options
Support: Commercial support and SLAs

Manual / DIY

Best for bespoke packaging workflows.

Maximum control

Cost: Your team's time
App catalog: Anything you package
Time per app: Often hours
Packaging and detection: Built and tested by you
Updates: You own the workflow
Support: Internal expertise

Comparison of IntuneGet, paid packaging tools, and manual app packaging for Microsoft Intune
Decision factor	IntuneGetBest balance Fast, transparent, and self-hostable.	Paid packaging toolsCommercial assurance Best when a vendor SLA is essential.	Manual / DIYMaximum control Best for bespoke packaging workflows.
Cost	Free and open source	Subscription licensing	Your team's time
App catalog	Supported Winget catalog	Vendor-curated catalog	Anything you package
Time per app	About 5 minutes	Minutes	Often hours
Packaging and detection	Generated automatically	Generated automatically	Built and tested by you
Updates	Flexible update policies	Vendor-managed options	You own the workflow
Support	Community on GitHub	Commercial support and SLAs	Internal expertise

No seat limits, no per-device fees, and no lock-in.

Explore the app catalog

For MSPs

One workspace. Every client tenant.

Manage app deployments across customer tenants without switching accounts.

Tenant isolation
Role-based access
Complete audit trail

Explore MSP features

Contoso

Ready

Northwind

Uploading

IntuneGetMSP workspace

Review batch deployment

Verify the selected app and customer tenants before deployment.

7-Zip

7zip.7zip

4 selected tenants

ContosoReady
NorthwindUploading
FabrikamPackaging
AlpineQueued

Review deployment

Fabrikam

Packaging

Alpine

Queued

Trust by design

Your app goes to your tenant. Not ours.

A transparent path from the Winget catalog to Microsoft Intune.

Winget catalog

Public catalog of applications and manifests.

Installer streamed, not stored

IntuneGet packaging

Prepares and validates packages for deployment.

Permissions checked

Microsoft Intune

Package and metadata delivered directly to your tenant.

Live

13,528Apps in catalog

Updated from live counters

Open source - AGPL-3.0Full source available. Contributions welcome.

Self-hostable - Docker + SQLiteRun in your environment with minimal components.

🇪🇺EU metadata - FrankfurtHosted metadata is stored in Frankfurt, EU.

Access documented - Review every permissionAll requested permissions are documented for review.

Read the security details

Answers for the questions admins ask first.

Clear answers about permissions, packaging, deployment, and hosting.

IntuneGet uses a single delegated permission, User.Read, to sign you in and read your basic profile - nothing else runs under your user identity. The app itself uses five application permissions that a Global Administrator grants once through admin consent. Two of them allow writes: DeviceManagementApps.ReadWrite.All to create and update the apps IntuneGet uploads to your tenant, and DeviceManagementServiceConfig.ReadWrite.All for Intune service configuration used during app setup. The other three are read-only, covering device configuration, managed device information, and group membership.

See the full permissions list

Still have questions?

Open a GitHub Issue

Use IntuneGet your way.

Start with the hosted service, or run the same open-source platform in your own environment.

Fastest pathintuneget.com

Start deploying now

Start upload to Intune

5-minute setup
Hosted in the EU
No per-device fees

Docker

GitHub

Run it yourself

Deploy with Docker and SQLite, with full control of your environment.

View self-hosting guide Browse the source

Open source under AGPL-3.0

From Winget to Intune in Minutes

One selection. One review. One upload.

7-Zip

Deployment settings

Microsoft Intune

Exact catalog ID

Settings before upload

Track every deployment

Less packaging work. More control.

Deploy with confidence

Stay current automatically

Know when action is needed

See every outcome

Choose the workflow that fits your team

One workspace. Every client tenant.

Contoso

Northwind

Review batch deployment

Fabrikam

Alpine

Your app goes to your tenant. Not ours.

Winget catalog

IntuneGet packaging

Microsoft Intune

Answers for the questions admins ask first.

Where is my data stored?

What permissions does IntuneGet request?

What can IntuneGet see and do in my tenant?

What happens if IntuneGet is discontinued?

What is IntuneGet and how does it work?

Is IntuneGet really free, and why?

How long does setup take?

Which applications are supported?

Can I self-host IntuneGet?

What support is available?

How do I deploy Winget apps to Intune without scripting?

Use IntuneGet your way.

Start deploying now

Run it yourself