Configure Requirement Rules in a Patch My PC Cloud Deployment

Applies to: Patch My PC Cloud

The Requirements tool of the Patch My PC (PMPC) Cloud deployment wizard allows you to configure custom optional requirements (including requirement rules) that must be met for the app to be deployed to the target audience.

This includes:

• Standard Requirements

• OS Architecture Requirements

• Additional Requirements Rules

Configure these settings as required and detailed below.

Important

If you are deploying a Custom App created with Requirement Rules, some of the fields in this section will be prefilled. Although you can modify the fields as required, you will be unable to specify a value that is lower than that configured in the properties of the Custom App.

Standard Requirements

Minimum operating system

From the Minimum operating system dropdown, select the minimum operating system required by this app.

Note

The default Minimum operating system value is set to match the first value in the dropdown, which corresponds to the oldest version of Windows still supported by Microsoft. As Microsoft deprecates a Windows version, this value and the values in the dropdown list will automatically update to the oldest version still supported by Microsoft.

Tip

We recommend leaving the Minimum operating system dropdown at its default unless you need to configure a specific value. If an app/deployment is configured for a specific Windows version, when Microsoft retires that version, you will no longer be able to deploy the app unless you update this field to a supported Windows version.

Min RAM memory (MB)

Configure the minimum amount of RAM required to run this app.

Minimum CPU speed (MHz)

Configure the minimum CPU speed required to run this app.

Minimum number of logical processors

Configure the minimum number of logical processors required to run this app.

OS Architecture Requirements

The OS Architecture Requirements section lets you specify which operating system (OS) architectures the app can be deployed to.

By default, the relevant checkbox is checked based on the value configured in the Architecture field.

Note

For example, if Architecture is configured:

• As 64-bit, the 32-bit checkbox under OS Architecture Requirements will be unchecked and cannot be checked.

• As 32-bit, the 32-bit checkbox under OS Architecture Requirements will be checked and cannot be unchecked. As this is a 32-bit app, the 64-bit checkbox is checked by default, but it can be checked.

You also cannot uncheck the checkbox in the OS Architecture Requirements section that corresponds to the selected Architecture.

The ARM checkbox in the OS Architecture Requirements section can always be checked/unchecked, regardless of the configured Architecture.

Configure the relevant settings as required.

Additional Requirements Rules

Using the Additional Requirements Rule section, you can create up to 10 optional requirement rules based on the following:

• File

• Registry

• Script

To configure an Additional Requirement Rule:

1. Click Add in the Additional Requirements Rules section.

1. On the Add Requirement Rule screen, select the relevant type of rule from the Rule Type dropdown, then configure the required options as required.

Note

To configure a script-based Requirement Rule requires the PowerShell script to already exist.

Rule Type	Available Options
File	Path – The path to the folder you are checking for. File or Folder – The folder containing the file you are checking for. Property – Various options, such as whether the item exists or does not, the date it was created, modified, etc.
Registry	Key Path – The path to the Registry key. Value name (optional) – The name of a value contained within the specified Key Path that you want to check for. Registry key requirement – Various options, such as whether the key exists or does not, comparisons, etc.
Script	Script Name – The name of the script, which you can leave blank if you want to use the name of the script you are going to import. Import Script – Allows you to browse to an existing PowerShell script to import. NOTE If the script is unsigned, you will see the Script was detected as unsigned warning. Script – Shows the script’s content. NOTE You cannot modify the script in the Script window. Select output data type - Various options, such as type, version, etc.

1. Configure the following additional options based on the type of rule you are creating.

Rule Type	Additional Options
File or Registry	Associated with a 32-bit app on 64-bit clients – If enabled, allows the rule to expand any path environment variables in the 32-bit context on 64-bit endpoints.
Script	Run script as 32-bit process on 64-bit clients – If enabled, allows the script to be run in a 32-bit process on 64-bit clients. If disabled, the script runs in a 64-bit process on 64-bit clients and in a 32-bit process on 32-bit clients. Run this script using the logged on credentials - Run the script using the credentials signed in to the device. Enforce signature check – If enabled, verifies that the script is signed by a trusted publisher, allowing the script to run without warnings or prompts. The script will run unblocked. If disabled, will require the end user to confirm they are happy for the script to run, but without signature verification. NOTE If the script imported is unsigned, you will be unable to enable this option.

Note

In terms of Scripts, in the current version:

• We only support PowerShell (.ps1) scripts

• You can only import a single script per Requirement Rule.

• We do not sign your scripts if we use them in one of our deployments. If this is a requirement, you will need to sign the scripts yourself.

1. Click Add Rule to add the requirement rule.

The rule is added to the list of requirement rules.

Note

You will notice that a default Script Requirement Rule is added to the deployment, which cannot be edited or deleted. This is only actually used if you add an Update Only assignment to this deployment. Previously, we automatically added this script in the background in this scenario. We now highlight this so you can see the contents of this script.

Also, you can:

• Edit a Requirements Rule by clicking the pencil icon beside the relevant rule, making the required changes, then clicking Save Rule to save the changes.

• Delete a Requirements Rule by clicking the red trash can beside the relevant rule to remove it from the list of rules.

Tip

You can click the eye icon beside the Script rule to open the View Requirement Rule screen, where you can see the content of the script.

1. Repeat the steps in this section to add any additional requirement rules.

Note

Editing a deployment and changing any Requirement Rules will apply any changes in Intune immediately after the deployment is updated successfully in Intune.

Important

Using Add Version will not update the original deployment with any changes made to the Requirement Rules. If you edit the original deployment, you will see errors highlighting where settings with higher values for the new version have been configured compared to those in the original deployment.

If you configure Requirement Rules in both the Cloud Portal and Intune, the rules in the Portal will overwrite those in Intune. Likewise, if you have configured requirements in Intune and not in the Cloud Portal, we will not copy these to the Portal and will copy these requirements forward.

Next Steps

If you do not want to configure any additional settings, click Next to move to the Assignments tab.

Otherwise, navigate to the relevant tool to configure the required settings, which are explained in the relevant section.