Frequently Asked Questions
General
What is Robopack?
Robopack is a cloud-native platform that automates app packaging and patch management for Microsoft Intune. It provides access to over 30,000 applications and automates the entire lifecycle from packaging to deployment.
Where do apps come from?
Robopack sources applications from two repositories:
- Winget — the Windows Package Manager repository, where vendors typically publish updates first
- Microsoft Store — the official Microsoft Store
If an app is not listed in either source, it cannot be added as an Instant App. You can use Convert Package to upload your own installers as custom apps.
Learn more about how these repositories are validated in our blog post: How We Validate 30,000+ Apps From Community Repositories.
Is Robopack ISO 27001 certified?
Yes. Robopack holds ISO 27001 certification, ensuring that your data and operations meet international information security standards.
How much does Robopack cost?
Robopack offers graduated pricing starting at EUR 3.50 per device/year. For commercial use above 100 devices, a minimum annual fee applies until 256 devices. Visit robopack.com/pricing for current pricing, or request a free trial.
Can I try Robopack for free?
Yes. You can request a free trial at app.robopack.com/trial. The trial gives you full access to all features. See Setting Up Your Free Trial for a walkthrough. The default trial limit is 25 packages, but support can increase this to 250 upon request.
What is the free license?
Organisations with fewer than 100 devices in Intune qualify for a free license with no restrictions on features. Support is not included with the free license. If the environment exceeds 100 devices, a paid license is required.
How does device counting work for licensing?
Robopack counts Windows devices managed by Intune. This count is used as context when discussing licensing and renewals — it is not used for automated license enforcement.
Does Robopack have an API?
Yes. Robopack provides a public V1 API for managing flows, deployments, and viewing Radar data. An interactive API browser is available in Settings > API Integration > API Documentation. The V1 endpoints are the only ones supported for external use — other endpoints visible in browser network requests are internal and unsupported.
How do I contact support?
Support can be reached via support@robopack.com or by using the support chat in the Robopack portal at app.robopack.com.
Setup & Configuration
How do I connect my Intune tenant?
Navigate to Settings > Tenants in Robopack and click Authorize to grant Admin Consent permissions. See Connecting Your Intune Tenant for the full guide.
What permissions does Robopack need?
The initial trial signup only requires sign-in and organisation read permissions. When you authorize your tenant, Robopack requests DeviceManagementApps.ReadWrite.All (read/write Intune apps), Group.ReadWrite.All (create groups), and device read permissions. See the full permissions reference.
What happens when the tenant connection is set up?
Once the tenant connection is in place, Robopack uses the Enterprise App for all operations in your tenant. You can remove the admin account used for the initial connection. Robopack creates Entra ID groups per app for its operations.
Can I connect multiple Intune tenants?
Yes. Robopack supports multi-tenant management from a single organisation. Each tenant can have its own permissions and SSO settings. There is no stated limit on the number of connected tenants.
Deployment & Patching
How many apps are available?
Robopack provides access to over 30,000 applications from Winget and the Microsoft Store. You can also upload custom applications.
What is the recommended patching workflow?
Set up a Robopatch flow with multiple waves:
- Wave 1 (Test) — Required deployment to a test device or user group
- Wave 2 (Pilot) — Required deployment to a pilot group
- Wave 3 (Production) — Required deployment to all devices or users
Set delays between waves and enable Auto-update to automatically start new version deployments when available.
Do I need to create new groups every time an app updates?
No. Robopatch reuses the groups from previous deployments. The old package is superseded and the new version deploys to the same groups, going through the waves again.
Do I have to do anything when new versions come out?
No. Once you have set up a Robopatch flow with Auto-update enabled, everything is handled automatically. New versions are detected, packaged, and deployed through your configured waves.
What does "Required" vs "Available" mean?
Required forces the app to install on all targeted devices. Available makes the app appear in Company Portal for self-service install, and only updates devices that already have the app installed.
How does supersedence work?
Supersedence is managed by the patch flow. Robopack keeps a configurable number of previous versions (default: 3) before deleting old versions from Intune. When a new version is deployed, older versions are automatically superseded.
How does Robopack handle Autopilot / ESP?
When an app is superseded by Robopack, any Enrollment Status Page profiles where the app is set as required will be updated to the newer version automatically. You should add your Autopilot device audience group to a wave for it to take effect.
What does error code 0x0 (0) mean on Live Status?
Error code 0x0 (0) indicates success, not failure. This is a common source of confusion in Intune reporting.
What does Intune error 0x8007EA61 mean?
This error can mean either:
- The same app was already installed manually on the device (conflict with Intune's system-context installation)
- The user deferred the installation via PSADT (deferral error code 6001)
Radar Tracking
What is Radar Tracking?
Radar Tracking scans your Intune-managed devices to discover manually installed software and brings it under automated management.
How does Radar Tracking work?
Radar reads Intune's Discovered Apps data to identify devices with outdated software. It populates Entra ID groups with those devices so Robopatch can deploy updates to them. Radar data refreshes every 24 hours.
Can Radar only update devices that already have an app?
Yes. Enable Radar Tracking on a patch flow to target only devices where the software is already installed. Devices without the app are not affected.
Custom App Settings
Do Custom App Settings persist across updates?
Yes. When the Target version is left empty, Custom App Settings apply to all future versions of the app. You configure once and every future version inherits the same settings.
How do I prompt users to close apps before updating?
Add the process name to the Apps to Close field in Custom App Settings. Specify process names without the .exe extension (e.g. chrome not chrome.exe). You must also use a script template that has the Welcome dialog enabled.
How do I include configuration files in my deployment?
Upload files as Script Accessory Files in Custom App Settings, then reference them in your install commands using the {{[supportFiles]}} variable.
Can I deploy just files without an application?
Robopack is designed for application deployment. However, you can use Custom App Settings with pre-install or post-install PowerShell commands to perform file copy operations as part of an app deployment.
Script Templates
Does Robopack support PSADT v4?
Yes. Robopack supports both PSADT v3 (default) and PSADT v4.1. You can select v4.1 as a script template or create custom templates based on it. See Script Templates for details.
How do I stop desktop shortcuts from being created?
The default script template already removes desktop shortcuts. If you want to change this behaviour, go to Settings > Script Templates and adjust the template.
Where are installation log files located?
By default, PSADT installation logs are at C:\Windows\Logs\Software. You can change the logging directory in the script template settings.
What are Custom App Settings?
Custom App Settings let you define configuration (registry values, files, install arguments) that is applied to all versions of an app automatically. Configure once, and every future version inherits the same settings. See Custom Packaging for details.
What are Patch groups?
Patch groups let you manage multiple Robopatch flows together with shared settings and deployment waves. Instead of configuring each flow individually, you can group related apps and manage them as one. See Robopatch for details.
Does Robopack support two-factor authentication?
Yes. For accounts using username and password, you can enable 2FA using authenticator apps (Microsoft Authenticator, Google Authenticator, etc.) in Settings > Account. You can also require 2FA for all password logins organisation-wide.
What does "Match newer versions in detection method" do?
This option changes the detection rule from Equals to Greater than or equals to, preventing Intune from re-deploying an app when a newer version is already present on the device.
How does Wave Time Limit work?
If a Wave Time Limit is set, the patch flow automatically advances to the next wave when the time limit is reached, even if the success threshold hasn't been met. If you want to wait until the flow has completed instead, use Delay after completion.
Are uploaded apps unique to my tenant?
Yes. Apps and configurations are per-customer and per-tenant. They are not shared with other Robopack customers.
Still have questions?
Contact support at support.robopack.com.