Choose how your organization installs apps.
Package source
Deploy through Microsoft Store
Use Intune’s Microsoft Store integration to install and update the app.
- In the Intune admin center, go to Apps > All apps > Create. Select Microsoft Store app (new).
- Search for ChatGPT from OpenAI, or enter the Store
product ID
9PLM9XGG6VKS. Select the app and review its installation settings. - On App information, set Install behavior to System.
- Under Required, add your target group so Intune installs the app automatically, then select Create.
For optional installation through Company Portal, use Available for enrolled devices instead.
Devices need access to the Microsoft Store and Windows Update endpoints in Microsoft’s network requirements. If your network blocks these endpoints, select Offline MSIX.
For installation context, network requirements, and deployment monitoring, see Microsoft’s Intune Store app guide.
Deploy an offline package with Intune
Use a downloaded MSIX when devices can’t use Microsoft’s distribution services or you need to deploy a specific approved version. Choose a Required assignment so Intune installs the app automatically.
If you’ve only blocked access to the Microsoft Store app, you can still deploy through Intune’s Microsoft Store integration. Select Microsoft Store (recommended) above.
Assignment
- Download the x64 MSIX or Arm64 MSIX for your devices.
- In the Intune admin center, go to Apps > All apps > Create. Select Line-of-business app, upload the MSIX, and review the package information.
- On Assignments, add your target device group under Required.
- In that assignment’s Install Context column, select User context, change it to Device context, and save.
- Review and create the app. Confirm successful installation in Device install status, then have employees launch ChatGPT normally.
If the app doesn’t appear, have users sign out and back in.
For more information, see Microsoft’s LOB app deployment guide.
To let users choose when to install the offline package, use a Windows app (Win32) with an Available for enrolled devices assignment:
-
Download the x64 MSIX or Arm64 MSIX, plus the offline license. Rename the package to
ChatGPT.msixand keep both files in the same folder. -
Save the following as
Install-ChatGPT.ps1beside the downloaded files:#Requires -RunAsAdministrator $ErrorActionPreference = 'Stop' Add-AppxProvisionedPackage -Online ` -PackagePath "$PSScriptRoot\ChatGPT.msix" ` -LicensePath "$PSScriptRoot\ChatGPT-License.xml" ` -Regions all -
Use Microsoft’s Win32 app workflow to package these files and add a Windows app (Win32) in Intune. Set Install behavior to System, target the package’s architecture, and run the script with 64-bit Windows PowerShell. Assign it as Available for enrolled devices.
Win32 installation and detection settings
Use this install command:
%SystemRoot%\Sysnative\WindowsPowerShell\v1.0\powershell.exe -NoProfile -File .\Install-ChatGPT.ps1For the custom detection rule, run the following script in 64-bit PowerShell.
It reports success when Windows has provisioned the app on the device. If you deploy a
specific version, also compare its Version with your approved version.
$package = Get-AppxProvisionedPackage -Online -ErrorAction Stop |
Where-Object DisplayName -eq 'OpenAI.Codex'
if ($package) {
Write-Output $package.PackageName
exit 0
}
exit 1For the uninstall command, package an Uninstall-ChatGPT.ps1 script with these
commands and run it in the same System context. This removes the provisioned
package and the app registrations for all users on the device.
#Requires -RunAsAdministrator
$ErrorActionPreference = 'Stop'
Get-AppxProvisionedPackage -Online |
Where-Object DisplayName -eq 'OpenAI.Codex' |
Remove-AppxProvisionedPackage -Online -AllUsers
Get-AppxPackage -AllUsers -Name 'OpenAI.Codex' |
Remove-AppxPackage -AllUsersFollow your organization’s PowerShell script-signing policy for both scripts.
The app becomes available to users when Windows registers the provisioned package at sign-in. Have users sign out and back in if it doesn’t appear.
Deploy with Microsoft Configuration Manager (SCCM)
Deploy the downloaded MSIX through Configuration Manager and Software Center.
- Download the x64 MSIX or Arm64 MSIX for your devices. Put it on a network share accessible to Configuration Manager.
- Go to Software Library > Application Management > Applications > Create Application. Select Windows app package and enter the MSIX path. Review the detected package information and enable Provision this application for all users on the device.
- Distribute the content to your distribution points and deploy to a device collection. Choose Required to install automatically, or Available to let users install from Software Center.
Use the Windows app package deployment type, rather than the Store-link deployment type. For package requirements and all-user provisioning, see Microsoft’s Configuration Manager guide.
If your deployment workflow requires it, download the offline license alongside the package.
Package source
Let users install the app
Use this option when users can install applications themselves or get help from an administrator.
- Direct users to the ChatGPT Windows installer.
- Run the installer and follow the Windows installation prompts. An administrator must approve the installation.
- Open ChatGPT and sign in with a work account to get started.
Users can also install from the command line:
winget install --id 9PLM9XGG6VKS -s msstoreThe installer provides automatic updates. Microsoft Store components may appear during installation or updates, but users don’t need to browse the Store.
Install from an offline package
Download the files on a connected machine, then copy them to the target device. An administrator must perform the installation.
-
Download the x64 MSIX or Arm64 MSIX, plus the offline license. Rename the package to
ChatGPT.msixand keep both files in the same folder. -
Open Windows PowerShell as an administrator in that folder and run:
Add-AppxProvisionedPackage -Online ` -PackagePath .\ChatGPT.msix ` -LicensePath .\ChatGPT-License.xml ` -Regions all -
Sign out and back in if the app doesn’t appear, then open ChatGPT and sign in with a work account.
These links provide the latest Store-signed package for each architecture. Offline installation doesn’t provide offline access to ChatGPT. Standalone MSI and non-Store EXE packages aren’t available.
Deploy with another management tool
Use your management tool’s MSIX deployment workflow to install the app on managed Windows devices.
- Download the x64 MSIX or Arm64 MSIX for your devices.
- Add the MSIX to your deployment tool. Configure installation for the device, using Local System or administrator privileges.
- Assign automatic installation to a pilot device group. Confirm that employees can open ChatGPT under their normal Windows accounts before expanding deployment.
If the app doesn’t appear, have users sign out and back in.
Install with a PowerShell script
If your tool requires an installation command, download the offline license alongside the MSIX.
Rename the package to ChatGPT.msix and save this script as
Install-ChatGPT.ps1 in the same folder:
#Requires -RunAsAdministrator
$ErrorActionPreference = 'Stop'
Add-AppxProvisionedPackage -Online `
-PackagePath "$PSScriptRoot\ChatGPT.msix" `
-LicensePath "$PSScriptRoot\ChatGPT-License.xml" `
-Regions allPackage the script and both files together. Configure your tool to run the script with 64-bit Windows PowerShell as Local System or an administrator.
Manage app updates
The app checks for updates by default, including after an offline
installation. To enable automatic updates, allow devices to reach
persistent.oaistatic.com. If you disable automatic updates, deploy newer
packages through your management tool.
For update policy and rollout guidance, see Manage app updates. Disabling the built-in updater doesn’t disable updates from the Microsoft Store or your management tool.
Troubleshooting
Users are prompted for administrator credentials when installing
For self-install, this is expected. An administrator must approve the installation.
For an Intune deployment through the Microsoft Store:
- In the Intune admin center, go to Apps > All apps and select ChatGPT.
- Check Install behavior in the app’s Properties. If it’s User, add the app again as a Microsoft Store app (new) and select System on App information.
- Assign the app to your target group under Required or Available for enrolled devices. If you added a new app, remove that group’s assignment from the original app.
- Sync the affected device with Intune, then check Device install status. For an available assignment, retry the installation in Company Portal.
If the app is already installed, deploying it with System install behavior may
cause Intune to report 0x87D1041C. Installation still succeeds in this scenario.
Verify the app on the affected device.
Installation fails with error 0x80073D28
Windows returns 0x80073D28 (ERROR_PACKAGED_SERVICE_REQUIRES_ADMIN_PRIVILEGES)
when it can’t install a packaged service without administrator privileges.
Run the installation as an administrator, or configure your deployment tool to
install in device or System context.
For an existing SCCM deployment:
- Open the application’s Properties > Deployment Types.
- Edit the Windows app package deployment type and open User Experience.
- Enable Provision this application for all users on the device and save.
- Refresh the client’s machine policy, then retry the installation in Software Center.
For more information about the provisioning setting, see Microsoft’s application deployment settings.