Intune Software Requirements for Patch My PC Publisher
Applies to: Patch My PC Publisher V3.x
Patch My PC (PMPC) Publisher can be installed on either a Microsoft Windows client or Windows Server operating system (see Core Requirements) when publishing applications and updates solely to Microsoft Intune.
However, even in Intune-only scenarios, particularly when Publisher is installed on a Windows client operating system, specific WSUS components are still required. These components provide the WSUS API functionality needed to process and deserialize the update catalog format used by Patch My PC.
Tip
Some organizations have strict security or operational requirements mandating the use of Publisher instead of Patch My PC Cloud, or require separation of duties between Intune and ConfigMgr/WSUS administration teams.
In these cases, it is fully supported to deploy a separate instance of Publisher dedicated solely to Intune publishing, even if another Publisher instance already exists for WSUS or ConfigMgr.
This approach aligns with least-privilege principles, allowing permissions, credentials, and administrative access to be scoped specifically to the Intune publishing workflow.
Important
Publisher does not need to be installed on each device receiving apps or updates from Intune.
Publisher is used only to publish apps and updates into Intune. Once published, delivery, installation, and enforcement on client devices is handled entirely by the Intune Management Extension (IME), which is already automatically installed on Intune-managed Windows devices.
Installing Publisher on individual client devices is not required and provides no benefit for app or update deployment.
Windows Server Operating System
If Publisher is already being used with ConfigMgr and/or WSUS, and the same Publisher instance will also be used for Intune, the software requirements for ConfigMgr or WSUS will already satisfy the WSUS API component requirements to publish to Intune.
If Publisher is being used exclusively for Intune, a full WSUS role installation is not required. In this case, only the WSUS API components must be installed to allow Publisher to process update metadata and interact with WSUS libraries used during publishing.
The following steps explain how to install the required components for this scenario.
Install the WSUS UpdateServices API
To install the WSUS UpdateServices API:
Open an elevated PowerShell window.
Run the following command:
To confirm the UpdateServices API is installed, run:
The feature should show as Installed.
Windows Client Operating System
When installing Publisher on a Windows 11 device (typical for Intune-only publishing scenarios), the WSUS Remote Server Administration Tools (RSAT) tools must be installed. A full WSUS role installation is not required.
If the RSAT tools are not installed, you will see the following message when installing Publisher.
The following steps explain how to install the required components for this scenario.
Install WSUS RSAT Tools
To install the WSUS RSAT Tools:
Open an elevated PowerShell window.
Run the following command:
To confirm the WSUS RSAT tools were installed successfully, run:
The output should show the capability state as Installed.
Note
It is typical for the download and installation of the WSUS RSAT tools to take ~15 minutes. Review C:\Windows\Logs\CBS\CBS.log and C:\Windows\Logs\DISM\dism.log for the download and installation progress.
Last updated
Was this helpful?