psadt-deploy Install

Claude Code skill · v0.50.0 · 2026-10-13

PSADT v4 to Intune,
in verified phases.

Thirteen phases, each owned by a script rather than by prose. A step either passed or it did not - and the thing that decides is the same every time.

terminal
$ {{ installCmd }}
→ ~/.claude/skills/psadt-deploy
> Create the Win32 Intune package for 7-Zip 24.09
Windows · Node 18+ · zero dependencies
{{ s.value }}
{{ s.label }}
{{ s.note }}

The workflow

Phase 0 through 12

Every phase leaves a verdict behind, and four of them stop to ask you something. Step through them here.

Phase
{{ activeNum }}
{{ activeName }}
{{ counter }}
{{ cardPad }}

{{ cardName }}

opt-in {{ cardOwner }}

{{ cardBlurb }}

Hover a step for what the guide says about it.

✓ {{ it.label }} {{ it.meta }} i
{{ it.tip }}
{{ c.mark }} {{ c.name }} {{ c.what }} {{ c.status }} i
{{ c.tip }}
{{ cardVerdictLabel }}

{{ cardVerdictText }}

decision gate

{{ cardGate }}

A vendor-signed kernel driver is RED, not a warning.

Classified before anything is built, because the alternative is a package that installs cleanly and then fails to load on every device.

{{ d.verdict }}

{{ d.when }}

{{ d.then }}

Appendix L.2

Nineteen installer engines, and the trap in each

Identified by fingerprint, not by guesswork, and consulted before any web search. Twelve of the fourteen carry a trap the switch table alone will not tell you - and two, MSIX and App-V, are routed away from PSADT rather than wrapped in it.

{{ engineName }}

silent install
{{ engineSilent }}
detection
{{ engineDetect }}
{{ trapLabel }}

{{ engineTrap }}

One command

Installs the skill into ~/.claude/skills/psadt-deploy and runs the setup doctor. Configuration, the DPAPI secret and downloaded tools go to %LOCALAPPDATA%\psadt-deploy, so they survive an update or a re-install.

$ {{ installCmd }}

Uploading to Intune needs an Entra app with the Microsoft Graph application permission DeviceManagementApps.ReadWrite.All, admin-consented. New-PsadtEntraApp.ps1 creates it in one run; a Global Administrator or Privileged Role Administrator signs in once. Everything before the upload, the Windows Sandbox test included, needs no Entra permission. Every permission, and what the setup script does.

Figures as of v0.50.0 and verified against the repository at that version - the linked source is authoritative, not this page. Not affiliated with or endorsed by Microsoft.