Deploy Adobe Acrobat Pro Updates via Intune

Intune can be used to deploy Adobe Acrobat updates to end user devices. The easiest way to achieve this is to use Intune to deploy the latest Adobe .msp file (.msp files are Adobe patch files) to end user devices to update existing Adobe Acrobat installations.

When Adobe releases new major versions or security updates use the guide below to create an update application in Intune and deploy to end user devices.

Instructions

1. Download the latest offline installer for Adobe Acrobat Pro DC here: Download Acrobat | Enterprise term or VIP license
2. Extract the downloaded .zip file
3. The latest version of the .msp file should be included in the extracted folder but if not it can be downloaded from here (.msp file): Acrobat Enterprise Release Notes — Acrobat-Acrobat Reader Release Notes
4. The installer files will now need to be converted to an .Intunewin file. You will need to have installed the Microsoft Win32 Content Prep Tool before completing the steps below. Guide here – https://itwalkthroughs.com/knowledge-base/create-intune-windows-app-win32/
5. Copy all the extracted files including the .msp file to C:\IntuneAppInput
6. Open a command prompt (as Admin)
7. Enter the command C:\IntuneApp\IntuneWinAppUtil.exe and fill out the following
   1. Source Folder: C:\IntuneAppInput
   2. Setup File: AcroPro.msi
   3. Output Folder: C:\IntuneAppOutput
   4. Catalog Folder: N

8. The IntuneApp utility will now build the package and save the *.intunewin file to C:\IntuneAppOutput
9. Go to the Intune portal: Microsoft Endpoint Manager admin center
10. Click on Apps
11. Click on windows
12. Click on +Add
13. Select Windows app (Win32) as the App Type and click Select

14. Click on Select App Package file and upload the .intunewin file we just created.
15. Fill out the following fields and click Next
    1. Name: Adobe Acrobat Pro DC vx.x(version number)
    2. Description: A description of the Application
    3. Publisher: Application developer
    4. Version: Version of this installer
    5. Logo: Download a logo of the application and upload

16. The install and uninstall commands should pre fill. Change the Install Command to msiexec /p “Update Name.msp” /qn. The msp file name is the file you downloaded in step 2
17. Set the Device Restart behaviour to: No specific action

18. Click Next
19. Set the Operating system architecture to: 64bit
20. Set the Minimum operating system to: Windows 10 1607
21. Click Add and set the following (This is to run a check that Adobe Reader is installed on the machine)
    1. Requirement Type: File
    2. Path: C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat
    3. File or Folder: Acrobat.exe
    4. Property: File or Folder exists

22. Click Ok
23. Click Next
24. Set Rule format to: Manually configure detection rules
25. Click +Add and fill out the following (This checks to see the update has already been installed)
    1. Rule Type: File
    2. Path: C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat
    3. File or Folder: Acrobat.exe
    4. Detection Method: String (version)
    5. Operator: greater than or equal to
    6. Value: The current version you are installing

26. Click Ok
27. Click Next
28. Leave Dependencies as default and click Next
29. On the Supersedence tab as default 
30. Leave Scope Tags as default and click Next
31. On the Assignments tab under Required click +Add group and add the AAD group you would like this deployed to. For Example Adobe Users

32. Click Next
33. Click Create
34. The App will now upload to Intune and then automatically deploy to the users in the AAD group added above.