adobe acrobat reader DC

Install Adobe Reader DC using Microsoft Intune Win32 application deployment

During my visit at Microsoft Ignite 2018 in Orlando, one of the most awaited features for Microsoft Intune was announced; Still in public preview but we can finally deploy Win32 applications using Microsoft Intune. This is great news because now we don’t have to use work-arounds like PowerShell scripts. I have another post guiding you through the installation process of Adobe Acrobat Reader DC using Intune and PowerShell, and in this post I’ll try to guide you through the Win32 application deployment process and install Adobe Reader DC using Win32 deployment and Microsoft Intune. There are some great blog posts out there I think you should also read for a full understanding. I can only hope this post is of add value and helps you understand these new configuration options a little better.

Note: I have tested with Windows 10 1803 Enterprise and Pro versions. You will know Win32 Application Deployment is available for your tenant when you add an application like usual and see the new option: Windows app (Win32) – Preview

Go to and navigate to Microsoft Intune > Client Apps > Apps > Add app

Intune - Win32 Application


  • Windows 10 version 1607 and later
  • Device must be (Hybrid) Azure AD joined and Intune MDM enrolled
  • Prepped Win32 Application
  • Test device (for testing manual installation and Intune deployment)

This solution still relies on the Intune Management Extension and you will first need to prep your win32 application using the Microsoft Intune Win32 App Upload Prep Tool. This tool will package and convert your application to the new .intunewin format.

Install Adobe Reader DC using Win32 deployment and Microsoft Intune.

Sidenote: Remember you will need a free volume distribution license in order to distribute Adobe software to your clients. Go ahead and download your copy of Adobe Reader DC.

As previously described you can install Adobe silently using the command:

AcroRdrDC1900820071_en_US.exe /sAll /rs /rps /msi /norestart /quiet EULA_ACCEPT=YES

Note: your command can be different depending on your Adobe Version. Keep that in mind when you copy/paste ?

Go ahead and install Adobe Reader DC on your test device just to make sure your silent install works as expected. Later on, when configuring your Win32 Application in Intune, you will also need the application GUID for the uninstall command.

Run this PowerShell command after installation of Adobe Reader DC: (Thank you PJ1004; for the Sort-Object tip!!)

get-wmiobject Win32_Product | Sort-Object -Property Name | Format-Table IdentifyingNumber, Name, LocalPackage -AutoSize

Intune - Application GUID

Take a note of the GUID. Your uninstall command will be:

msiexec /x “{AC76BA86-7AD7-1033-7B44-AC0F074E4100}” /q

Prepping your application for Intune Win32 Application Deployment

  • Download your version of Adobe to a directory. I will use my own deployment as an example and start with AcroRdrDC1900820071_en_US.exe in the folder c:\temp\adobe\
  • Download the Microsoft Intune Win32 App Upload Prep Tool and extract it to c:\temp\
  • Create your output folder: c:\temp\AdobeIntune for the .intunewin package
  • Run the following command from the prep tool folder:
IntuneWinAppUtil.exe -c c:\temp\Adobe -s AcroRdrDC1900820071_en_US.exe -o c:\temp\AdobeIntune

The tool is very easy in use and with a simple strcture:

IntuneWinAppUtil.exe -c [source folder] -s [setup_file, such as setup.exe or setup.msi] -o [output_folder] for the generated .intunewin file.

The command will finish with [====================================] 100% Done!!!


In the output folder you will find a new file: AcroRdrDC1900820071_en_US.intunewin . Have a look at Oliver Kieselbach’s post for a deep dive in Microsoft Intune Management Extension and Win32 Apps.

You’re now ready to upload the package to Microsoft Intune.

Deploy the Win32 App with Intune

  • Navigate to >Azure Portal> Microsoft Intune> Client Apps
  • Click on App App
  • Select Windows app (Win32) – preview as your App type
  • Browse to the [your_adobe_setup_file].intunewin file
  • Click OK

Intune add win32 application

Move to the next part, App Information and configure to your needs. Here you will have to provide a Name, Description, Provider and some other values before you can continue.

Intune add win32 application

  • Click on OK at the bottom when you are done and continue to Program Configure

Here you will enter the install command and the uninstall command. Make sure you update the following lines when you copy/paste!

Install command:

AcroRdrDC1900820071_en_US.exe /sAll /rs /rps /msi /norestart /quiet EULA_ACCEPT=YES

Uninstall command:

msiexec /x {AC76BA86-7AD7-1033-7B44-AC0F074E4100} /q

Intune win32 application program settings

This is why you need to know the app GUID and why you test the silent install & uninstall commands.

  • Click on OK to continue to the App Requirements

For the Operating system architecture I choose 64-bit ut you can choose both 32-bit and 64-bit. The minimum OS version is Windows 10 1703. Configure these settings according to your needs.

Intune win32 application program requirements

  • Click on OK to continue to the Detection rules

You can manually configure detection rules or use a custom script. I choose to manually configure the detection rules with the following settings:

Intune win32 application detection rules

The Rule type is File because I want to check for the existence of the AcroRd32.exe file. The setup will only continue if this file does not exist.

Intune win32 application detection rules

  • Click on OK when you are ready to continue. I did not change any of the default return codes

Intune win32 application return codes

  • Click on OK and finally click on Save

The application will now be uploaded to Microsoft Intune. When ready assign it to a user or device group as usual.

The Intune Management Extension

If you have assigned a PowerShell script previously, the Intune Management Extension will be installed already. If not, It should be automatically pushed by Intune, prior to the app deployment. It will install the service “Microsoft Intune Management Extension” and will setup a scheduled task “Intune Management Extension Health Evaluation” The agent will check for scripts every 60 minutes, and the health check will run once a day to see if the agent is functioning correctly.

My test devices already had PowerShell scripts assigned so the Intune Management Extension is already installed. If not, the deployment of Adobe will firstr trigger the installation for the Intune Management Extension, followed by the installation of Adobe.  You can force a sync to install via the Management Extension by restarting the “Microsoft Intune Management Extension” service. To do so run the command;

Net Stop IntuneManagementExtension && Net Start IntuneManagementExtension

Monitoring the installation status

You can monitor the installation status from the Intune management portal.

  • Navigate to >Azure Portal> Microsoft Intune> Client Apps
  • Click on the newly deployed Win32 App
  • The Overview blade will show a summary of Device and User status

Intune win32 application deployment monitoring

When you click on “Device install status” you’ll find more details about individual devices and their install status.

Intune win32 application device install status

Install experience on devices

The Intune Management Extension will trigger the installation and you will receive 3 notifications;

The first notification will tell you there is a change to come. The second one will inform you the download has started and finally when the software is installed the third notification will show.

Intune win32 application user experience

After the last notification, the Start menu shows the newly installed Adobe Reader DC app and there will be a shortcut on the Desktop.

When you look at “Programs and Features” you’ll also see that “Adobe Acrobat Reader DC” has been installed, along with “Microsoft Intune Management Extension

Intune win32 application user experience


One of the first places you can have a look when there are any issues, is the Intune Management Extension Logfile at: C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\


Open the IntuneManagementExtension.log file and search for the keyword “adobe”. The log-file might not be that easy to read but it will give you a lot of info about application install status and possible error messages that might help you troubleshoot issues. I can’t post the logfile here since it contains information I don’t want out there in the open.

Detection Rules

Some interesting parts to look for after finding your keyword adobe are <![LOG[[Win32App] Start detectionManager SideCarFileDetectionManager]LOG]!> and <![LOG[[Win32App] Path doesn’t exists: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe applicationDetected: False]LOG]!>

Here you have your detection rules in action. The Intune Management Extensions looks for the existence of AcroRd32.exe and comes back with a value of False, meaning Adobe Reader DC is not installed.

Dowloading the app from Intune

A little further in the logfile you can see the download starts at <![LOG[[Win32App] ===Step=== Download]LOG]!> followed by <![LOG[[Win32App] ===Step=== ExecuteWithRetry]LOG]!> and <![LOG[AcroRdrDC1900820071_en_US.exe /sAll /rs /rps /msi /norestart /quiet EULA_ACCEPT=YES]LOG]!> which indicates the execution and installation of the Win32 application you deployed.

Application is Already installed

If the application is already installed, the detection rule will come back with a value of true like here:

<![LOG[[Win32App] Checked filePath: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe, Exists: True, applicationDetected: True]LOG]!>


Some errors you might encounter in the logfile are listed below. You will have to dig through the logfile and do a little more troubleshooting here.

  • Invalid detection rule: Bad filePath:
  • ArgumentException: System.ArgumentException: Illegal characters in path.
  • <![LOG[[Win32App] Failed on exception, set applicationDetected False]LOG]!>

Windows Registry

The Intune Management Extension store some info in the registry at the following locations. Have a look here to help you troubleshoot issues with Win32 Application deployment

  • HKLM\SOFTWARE\Microsoft\IntuneManagementExtension\Apps\
  • HKLM\SOFTWARE\Microsoft\IntuneManagementExtension\Win32Apps\


Then there is the good old eventlog. Have a look at the following logs:

  • Windows Logs>Application
  • Applications and Services Logs> Microsoft> Windows>
    • DeviceManagement-Enterprise-Diagnostics-Provider


5 2 votes
Article Rating

Oktay Sari

#Microsoft365 | #EMS |#MEM | #Intune | Father | #Diver | #RC Pilot & #Magician in spare time | former Microsoft WI MVP

Notify of

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Newest Most Voted
Inline Feedbacks
View all comments

[…] UPDATE: Have a look at my new post: Installing Adobe Reader DC with Intune – Part 2 (Win32 application deployment with Intune) […]

Seth Zwicker
3 years ago

Thanks a million! I’ve been able to deploy most apps via Intune but this was a sticking point for me.

3 years ago

Many thanks for the above post, which has helped loads with my deployment 🙂

I have one quick question. Do you know if the below switches, get around the out of the box ‘post’ install prompts? (i.e. setting it as the default PDF reader etc)

AcroRdrDC1900820071_en_US.exe /sAll /rs /rps /msi /norestart /quiet EULA_ACCEPT=YES


3 years ago
Reply to  Oktay Sari

Use the default app association CSP from Intune. See for step by step

3 years ago
Reply to  Oktay Sari

Many thanks for your quick response. I had already covered the 2 recommendations before posting my original question, but without really benefiting from either. I will try Rkast’s URL to managing the software defaults from within Azure, & will then give feedback 🙂

2 years ago

Any ideas when it’s stuck creating the app? I followed the instructions closely. I’m able to create other apps.

Screenshot:comment image

2 years ago
Reply to  Kristian

It worked after I downloaded the installation file again, creating a new intune file and then creating a new app in Intune. I did everything identically to the first time, but this time it worked for some reason.

Adam Scott
Adam Scott
2 years ago
Reply to  Kristian

Next time, check the InTune notifications in Azure – I got this message, but it was because the files were still uploading in the background. The notifications showed the progress for this, and when it reached 100%, the error disappeared.

2 years ago

For the PS part, if your test machine has a number of apps installed it’s a pain to find the Adobe line. Suggest adding a Sort-Object in to the command to make life easier:

get-wmiobject Win32_Product | Sort-Object -Property Name | Format-Table IdentifyingNumber, Name, LocalPackage -AutoSize
2 years ago
Reply to  Oktay Sari

You can also find only the app you need with a filter :
Get-WmiObject Win32_Product | Where-Object {$_.Name -like ‘*adobe*’} | Format-Table IdentifyingNumber, Name, LocalPackage -AutoSize

2 years ago

Hey, thanks for this post.

I’m stuck at the installation command line. I don’t understand what changes I have to make.
“AcroRdrDC1900820071_en_US.exe /sAll /rs /rps /msi /norestart /quiet EULA_ACCEPT=YES”

I’m guessing the .exe name, do I write my .exe file name?

2 years ago

I have a question. 🙂
When you need to install a new updated Version of a software. So maybe you installed the version 1.1 on all the devices and the software distributor release version 2.0. How would you bring that to all of your devices?
Just installl it over the existing software or does intune feature som ekind of “update-process”?
Have you done something like that?


2 years ago

Really good guide for Adobe. Have just one short problem.. Uninstall… if I use just cmd so everything seem be ok but if I want the same proces by Intune – Assignments – Uninstall – Group or Account so nothing happened..
Same problem I have if I want make update to new verison.. Or do you guys have any guidence for update Win32 apps? Thnaks in advance

Mike Hardy
Mike Hardy
2 years ago

Great post thanks. However I get the error “Access is denied.(0x80070005)
Can you please help?

M365 Admin
M365 Admin
2 years ago
Reply to  Mike Hardy

Same thing occurring here for certain devices/users (works for most users). Was digging into Controlled Folder Access and it’s implementation but looking to review the logs mentioned in the article.

2 years ago
Reply to  M365 Admin

I’m too receive access is denied, would need some help

2 years ago

Worked like a charm on AzureAD joined W10 1903. Thanks for the tips.

2 years ago

Hello, Can you help me with updating the Intune apps for example I have packed the Adobe Reader 1902120049 but there is new release and how is the correct path to update the application? I have changed the installation file and just wondering how detection rules can be changed so it can check if its older version?

AJ Jack
AJ Jack
1 year ago

Prep tool mentioned in the article is deprecated. New version is at

Tom van Veen
1 year ago

I was in a hurry getting Arcobat Reader deployed and your writeup helped me a ton! You are a legend! Thanks!

1 year ago


I would like to point out, that instead of detecting whether Acrobat Reader is installed or not, you can also do detection by version number in Windows registry. That would allow updating existing verisons.
I do it with the following Intune detection rules settings:

Type: Registry
Key path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}
Value name: DisplayVersion
Detection method: Version comparsion
Operator: Greater than or equal to
Value: 21.001.20155 (or whatever is the number of current version)

James Heathcote
6 months ago

Great article, we use this method to deploy to our entire organisastion. Out of 300 we have 60 that have errors, I beleive its because they either have older versions installed which predate Intune, or, they have 64bit versions they’ve installed manually as opposed to 32bit.

We now would like to uninstall Adobe Acrobat Reader DC (all versions) from all devices and install just the latest 64bit version. Do you have a way of achieving this as this seems like a common issue?

Martijn Hams
Martijn Hams
4 months ago

I had the same issue. I made a intune app of the Acro cleaner tool (AdobeAcroCleaner_DC2015.exe) wit the following parameters:
AdobeAcroCleaner_DC2015.exe /Silent /Product=1
This deinstalls all versions of Acrobat Reader. You can also use the tool Acrobat Pro (different swich)

16 days ago

With newer powershell versions Get-WMIObject is depreciated and your PS string will not work correctly. This updated one will,
Get-CimInstance -ClassName Win32_Product | Sort-Object -Property Name | Format-Table IdentifyingNumber, Name, LocalPackage -AutoSize