Skip to content

Deploy Any Windows App with Iru Custom Apps

Lance Crandall Lance Crandall
Deploy Any Windows App with Iru Custom Apps

Custom apps for Windows are now available in Iru Endpoint Management, supporting MSI, EXE, and PowerShell-wrapped installs. Upload your files, configure your settings, and let Iru handle deployment.

Traditionally, Windows app deployment has been cumbersome and unreliable. Installing applications required IT admins to repackage the files into another format, while being unsure if the update fired due to long delays in MDM check-ins.

The new Custom App Library Item for Windows solves for exactly that. It gives you a faster, more reliable way to deploy the apps your business depends on, with the flexibility to handle real installation logic along the way.

Packaging the App Without the Friction

With the Custom App Library Item, you upload a .zip file that contains your Windows installer and any supporting files. The Library Item removes the need to repackage the installer and supporting installer files into another format before deployment. And with support for installers up to 5 GB, you have room for every app your business uses.

For installs that need extra steps, like updating a registry key, you can include a PowerShell script in the zip and reference it in the install command. This enables a more straightforward, yet flexible way to deploy complex Windows applications.

For example, you can zip together FinanceApp.exe with a script called install.ps1. The script can install the app and then update a registry key with company-specific configuration. After uploading the zip file, you'd simply input install.ps1 into the install command field in the Custom App and the script will execute.

Restyle Finance App Form (1)
Configure Your Deployment Settings

After uploading, you decide:

  • Install and uninstall command lines — used for both deployment and version upgrades
  • Detection logic — file path, folder, registry key, or MSI ProductCode, so Iru knows whether the app is actually present before and after install
  • Architecture — x86, x64, or ARM64; auto-detected from MSI metadata where available
  • App metadata — icon, version, description, publisher
  • Enforcement timeframe — enforce immediately, or give users a grace period before installation becomes required
  • Install command — Reference any scripts that you packed with your zip.

Once you have that configured, assign the Library Item to a Blueprint via an Assignment Map. Iru takes it from there.

Deployment that Starts Immediately

Once you deploy the Custom App, online devices start installing within 15 minutes, at the next endpoint agent check-in. If an install fails, Iru keeps retrying on every agent check-in.

When an older version of the app is already installed, Iru automatically applies logic to minimize disruption to work during the update.

  • If the app is closed, Iru installs it silently with no user interaction.
  • If the app is open, Iru prompts the user every 8 hours to close it and update, up to the enforcement deadline.
  • When the enforcement deadline arrives, Iru closes the app automatically so the install can complete.

For apps that stay open all day, such as finance tools or CRMs, the recommended approach is to give at least one week before enforcement. Users will have a chance to update on their own terms, before being forced to quit the application at the deadline, eliminating IT needing to follow up.

Windows Custom Apps2

A Rollout Example

Your finance team uses an internal Windows app for approvals, reporting, and reconciliation. It's open most of the day. You need to roll out an important update in a week.

In the Custom App Library Item, upload the zipped installer, enter the application details, specify which executables indicate the app is in use, configure MSI-based detection, set a 3-day enforcement window, and assign it to the Blueprint.

Devices that are online start installing within 15 minutes. If the finance app is open, the user is prompted to close it before the deadline. If they don't close it before enforcement, Iru closes it automatically and completes the rollout.

Here's an example of how that configuration might look:

Restyle Finance App Form (2)

The Modern Way to Deploy Windows Applications

Iru’s Custom App Library Item for Windows introduces a new way to deploy Windows applications. Instead of needing an extra repackaging step and then waiting for hours to see if deployment was successful, Iru consolidates the entire workflow in one place, with enforcement that starts in under 15 minutes and reporting that gives you a clear answer on every device.

Want to explore further? The full documentation has you covered.

Ready to see it in action? Request a demo.

Recent Articles

Featured image: Apple beta testing and device management services: the perfect match
Mike Boylan 6 min read

Apple beta testing and device management services: the perfect match

Every fall, Apple’s newest operating systems arrive everywhere at once. That’s great for users, but it puts IT teams on the clock: they need to validate the release, find blockers, prepare their support teams, and decide when the business is ready to move.

Educational
Featured image: A representitive illustration of multiple laptops next to each other, representing endpoint security for Macs.
Iru Team 9 min read

Endpoint security for Mac: How to protect macOS at scale

Mac endpoint security combines built-in macOS protections with centralized tools that help you monitor devices, enforce policies, detect threats, and respond quickly across your entire fleet. Built-in macOS security features like Gatekeeper and XProtect provide a strong foundation, but they don't offer the visibility, automation, threat detection, or behavior detection needed to secure Mac devices at scale. Layering third-party tools such as endpoint management, endpoint detection and response (EDR), and vulnerability management closes those gaps. With Iru, you can manage and remediate your Mac fleet from a single AI-powered platform, giving your IT and security teams more time and control. Your Mac fleet grows one device at a time. Then, almost overnight, you're supporting remote employees, multiple offices, and hundreds of endpoints. At that point, endpoint security for Mac isn't just about protecting individual devices. It's about knowing what's happening across your entire environment.

Featured image: How a single PostScript file leaks your Mac's memory
Csaba Fitzl 8 min read

How a single PostScript file leaks your Mac's memory

When I started my InfoSec journey, most of the offensive classes I took focused on memory corruption exploits. I learned a lot about buffer overflows, DEP and ASLR bypasses, and even got into kernel exploitation. However, since my job at that time was mostly hunting for bad guys in an insane amount of logs and telemetry data, I never really had the time to apply this knowledge.

Threat Intelligence

See Iru in action

Discover why thousands of teams choose Iru

By submitting this form I agree to Iru’s Privacy Policy and consent to be contacted by Iru about its products and services.

Stay up to date

Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.