An administrator prepares a desktop application that ships as a setup executable with several supporting files, ready for deployment to Windows 11 devices with Microsoft Intune, and runs the Microsoft Win32 Content Prep Tool against the source folder. What does that tool produce, and what does it leave the administrator to define?
- AIt converts the source installer into an MSIX package so that the Windows servicing stack installs and removes the application, leaving the administrator to choose an assignment group and nothing further about the install itself.
- BIt inspects the source installer and writes the detection rules automatically from the product code that it finds, leaving the administrator to supply an install command but no rule that proves the application is present on the device.
- CIt uploads the packaged payload straight into the tenant and creates the application record there, leaving the administrator to assign groups without ever attaching a package file to an app in the Microsoft Intune admin center.
- DIt wraps the installer and its supporting files into an encrypted .intunewin package that the Intune Management Extension decrypts on the device, leaving the administrator to declare the install command, the uninstall command and the detection rules in Intune. Correct
Why A is wrong: Tempting because MSIX is a genuine modern packaging format for Windows applications and Intune can deploy MSIX line-of-business packages. Conversion to MSIX is the job of the MSIX Packaging Tool; the content prep tool changes the container, not the installer technology inside it.
Why B is wrong: Tempting because detection based on an MSI product code is a real option on a Win32 app, so it feels as though the packaging step could fill it in. The tool performs no inspection of that kind, and an app saved with no detection rule cannot report an installed state.
Why C is wrong: Tempting because the tool is run with tenant deployment in mind and the output file is useless anywhere else. The tool is an offline packager with no connection to the tenant, and the .intunewin file it writes has to be uploaded by hand when the app is added.
Why D is correct: Correct. The tool only builds and encrypts the content package. Everything that describes how the payload behaves, meaning the command line that installs it, the command line that removes it and the rule that proves it is present, is authored on the app record in Intune.