Robopack for Intune: Radar, Patch & Apps

Key insights

• Robopack for Intune: A SaaS tool that automates third-party app packaging, patching, and discovery for large device fleets.
  It integrates with Intune to convert installers, deploy updates, and reduce manual work across endpoints.
• Radar scanning: Automatically finds unmanaged or out-of-date apps on devices and highlights vulnerabilities.
  Teams use Radar to prioritize fixes and maintain a clear software inventory across the estate.
• Patch Groups and patch flow: Create phased, wave-based deployments to roll out updates safely by risk, location, or test group.
  Use supersedence and targeted waves to avoid user disruption and to verify each stage before broader rollout.
• Custom Apps and packaging: Convert complex Win32 installers to Intune-friendly formats (IntuneWin/MSIX) and apply PowerShell-based install scripts.
  Customize installs with app settings and PSADT templates to handle apps not present in standard libraries.
• Multi-tenant management and Entra ID SSO: Manage multiple Intune tenants from one pane and enforce role-based access with single sign-on.
  This suits MSPs and large organizations that need consistent, secure controls across tenants.
• Operational benefits and best practices: Use Radar for continuous visibility, apply patch groups for ongoing updates, and test deployment waves before broad release.
  These steps reduce vulnerability windows, cut manual effort, and improve patching reliability across Intune-managed devices.

Introduction to the Dean Ellerby Demo

The recent YouTube demo by Dean Ellerby [MVP] walks viewers through a practical, hands-on look at Robopack for Microsoft Intune, drawing on more than 100 live demonstrations to date. In the video, Ellerby breaks down the tool's core capabilities and shows how administrators can use them to automate packaging, patching, and discovery across an estate. As a result, the recording serves both as an introduction for new users and a refresher for teams evaluating third-party solutions for Intune management.

Importantly, the demo highlights concrete scenarios rather than abstract claims, which helps IT teams judge fit for purpose. Ellerby timestamps each segment to make it easy to skip to specific topics, such as scanning with Radar, building Patch Groups, or configuring multi-tenant access. Consequently, the presentation balances breadth and depth so viewers can follow practical workflows step by step.

Overall, the video positions Robopack as a complementary tool to Intune rather than a replacement, emphasizing integration and operational efficiencies. Viewers should note that the demo focuses on common enterprise use cases, including managed service provider (MSP) scenarios. Thus, the material proves relevant to both internal IT departments and external service teams managing several tenants.

Radar: Discovery and Inventory

The first major feature Ellerby demonstrates is Radar, a scanning capability that discovers unmanaged and third-party applications across Intune-managed devices. He shows how Radar provides visibility into installed software that Intune's native inventory may not flag, which helps teams prioritize patching and reduce security gaps. Consequently, Radar can act as an early warning system by surfacing vulnerable versions and missing updates.

However, the demo also highlights tradeoffs, particularly around detection accuracy and noise. While Radar speeds discovery, it can surface false positives or applications that require manual verification, which in turn consumes analyst time. Therefore, organisations must balance the benefit of broad visibility against the effort needed to validate results and tune scanning rules.

Moreover, Ellerby explains how Radar ties into end-to-end tracking so you can follow a detected issue from discovery to deployment. This linkage helps teams plan remediation and demonstrate compliance, but it also depends on solid initial inventory and consistent endpoint reporting. Ultimately, Radar enhances situational awareness while demanding disciplined processes to avoid alert fatigue.

Patch Groups and Deployment Flows

Ellerby spends significant time on Patch Groups and how to build wave-based deployments to mitigate risk. He demonstrates grouping devices by risk profile or location and releasing updates in phases to minimize disruption, which works well in large estates where a single failure can cascade. As a result, teams can reduce rollback risk and gather telemetry between waves before broad rollout.

The demo also explains why you might avoid uninstalling previous versions during updates, as preserving prior installs can simplify rollbacks and reduce user impact. At the same time, leaving older versions installed has security and compliance implications that teams must weigh carefully. Therefore, administrators should define policies that reflect their tolerance for risk, rollback needs, and compliance mandates.

In addition, the presentation outlines flow options, supersedence handling, and how patch groups support ongoing management. These features reduce manual overhead but introduce new operational decisions such as schedule cadence and testing windows. Ultimately, patch automation speeds updates while requiring investment in staging, monitoring, and remediation planning.

Custom Apps and Packaging

Ellerby then turns to packaging, showing how Robopack converts installers to Intune-backed formats and automates Win32 and MSIX packaging workflows. He demonstrates custom app packaging and using PSADT script templates to tailor installations, which helps teams deploy complex applications consistently. Thus, the tool can save time when organisations manage many bespoke or legacy installers.

Nevertheless, the video highlights the challenge of apps not present in public libraries; packaging custom apps still requires validation, testing, and occasional manual tweaks. While automation handles routine conversions, edge cases will demand scripted fixes or custom configuration, which raises the bar for testing. Consequently, IT groups must allocate resources for packaging validation and maintain a test environment to catch deployment issues early.

Finally, Ellerby shows how app properties and settings let teams customize installs at scale, giving flexibility without sacrificing repeatability. That flexibility benefits organisations that need to control install parameters across departments, yet it also requires careful governance to avoid inconsistent application behavior. Therefore, balancing automation with policy control becomes essential for long-term stability.

Multi-Tenant Management and Permissions

In the closing sections, the video addresses MSP and multi-tenant scenarios, explaining how Robopack centralizes access and simplifies cross-tenant operations. Ellerby discusses setting up tenant connections, managing user roles, and integrating with Entra ID Single Sign-On for streamlined authentication. These features reduce administrative friction and support secure delegation across client environments.

Still, multi-tenant setups create tradeoffs between convenience and risk, especially around permission scopes and tenant isolation. Granting broad rights speeds workflows but increases the blast radius if an account is compromised, while tight scoping improves security at the cost of added complexity. Thus, service providers should design RBAC and approval processes carefully to balance operational agility with security requirements.

Overall, the demo by Dean Ellerby delivers a practical roadmap for teams considering Robopack with Intune, outlining real-world workflows, common pitfalls, and configuration choices. By combining discovery, phased patching, custom packaging, and multi-tenant controls, the tool can reduce manual work while introducing governance decisions that teams must manage. Consequently, organisations should pilot these capabilities, assess tradeoffs, and build clear processes before broad adoption to maximize benefits and limit risk.

Keywords

Robopack Intune demo, Robopack for Intune, Intune patch groups, Intune custom apps, Multi-tenant Intune settings, Robopack radar feature, Intune patch management, Robopack multi-tenant demo