Deploy Adobe Reader Updates via Intune

Intune can be used to deploy Adobe Reader updates to end user devices. The easiest way to achieve this is to use Intune to deploy the latest Adobe Reader .msp file (.msp files are Adobe patch files) to end user devices to update existing Adobe Reader installations.

When Adobe releases new major versions or security updates use the guide below to create an update application in Intune and deploy to end user devices.

Instructions

1. Download the latest offline installer for the 32-bit Adobe Reader (https://get.adobe.com/au/reader/enterprise/)
2. Extract the .exe file with 7-Zip
3. The installer files will now need to be converted to an .Intunewin file. You will need to have installed the Microsoft Win32 Content Prep Tool before completing the steps below. Guide here – http://itwalkthroughs.com/knowledge-base/create-intune-windows-app-win32/
4. Copy all the extracted files to C:\IntuneAppInput
5. Open a command prompt
6. Enter the command C:\IntuneApp\IntuneWinAppUtil.exe and fill out the following
   1. Source Folder: C:\IntuneAppInput
   2. Setup File: AcroRead.msi
   3. Output Folder: C:\IntuneAppOutput
   4. Catalog Folder: N

7. The IntuneApp utility will now build the package and save the *.intunewin file to C:\IntuneAppOutput
8. Go to the Intune portal: Microsoft Endpoint Manager admin center
9. Click on Apps
10. Click on windows
11. Click on +Add
12. Select Windows app (Win32) as the App Type and click Select

13. Click on Select App Package file and upload the .intunewin file we just created.
14. Fill out the following fields and click Next
    1. Name: Adobe Reader
    2. Description: A description of the Application
    3. Publisher: Application developer
    4. Version: Version of this installer
    5. Logo: Download a logo of the application and upload

15. The install and uninstall commands should pre fill. Change the Install Command to msiexec /p “Update Name.msp” /qn. You will find the name of the required msp file in the files you extracted form the exe in step 2
16. Set the Device Restart behaviour to: No specific action

17. Click Next
18. Set the Operating system architecture to: 64bit
19. Set the Minimum operating system to: Windows 10 1607
20. Click Add and set the following (This is to run a check that Adobe Reader is installed on the machine)
    1. Requirement Type: File
    2. Path: C:\Program Files (x86)\Adobe\Acrobat Reader DC
    3. File or Folder: Reader
    4. Property: File or Folder exists

21. Click Ok
22. Click Next
23. Set Rule format to: Manually configure detection rules
24. Click +Add and fillout the following (This checks to see the update has already been installed)
    1. Rule Type: File
    2. Path: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader
    3. File or Folder: AcroRd32.exe
    4. Detection Method: String (version)
    5. Operator: greater than or equal to
    6. Value: The current version you are installing

25. Click Ok
26. Click Next
27. Leave Dependencies as default and click Next
28. On the Supersedence tab as default 
29. Leave Scope Tags as default and click Next
30. On the Assignments tab under Required click +Add group and add the AAD group you would like this deployed to. For Example Adobe Users

31. Click Next
32. Click Create
33. The App will now upload to Intune and then automatically deploy to the users in the AAD group added above.