Intune App Packaging

Deploy Docker Desktop via Intune | Win32 Packaging

Published 17 March 2026 · 8 min read

Docker Desktop is the standard development environment for containerised applications, widely deployed to developer workstations. Deployment via Intune requires enabling WSL 2 as a prerequisite, then deploying Docker Desktop with the --accept-license flag. This guide covers the full deployment including the WSL 2 prerequisite and handling the required reboot.

Contents
  1. Prerequisites - WSL 2 and Hyper-V
  2. Download the installer
  3. Wrap with the Content Prep Tool
  4. Add the app in Intune
  5. Install and uninstall commands
  6. Detection rule
  7. Known gotchas

Prerequisites - WSL 2 and Hyper-V

Docker Desktop requires either WSL 2 (recommended) or Hyper-V as the container backend. Enable WSL 2 before deploying Docker Desktop using a PowerShell script deployed via Intune:

# Enable WSL 2 prerequisites - deploy BEFORE Docker Desktop
# Run as a device configuration script in Intune

# Enable Windows Subsystem for Linux
dism.exe /online /enable-feature /featurename:Microsoft-Windows-Subsystem-Linux /all /norestart

# Enable Virtual Machine Platform (required for WSL 2)
dism.exe /online /enable-feature /featurename:VirtualMachinePlatform /all /norestart

# Set WSL 2 as default version (run after reboot)
# wsl --set-default-version 2
⚠️
Reboot required after enabling WSL 2
The WSL 2 feature enablement requires a reboot before Docker Desktop can use it. Stage your deployment: first deploy the WSL 2 enablement script (with reboot), then deploy Docker Desktop as a separate app deployment.

Download the installer

Download Docker Desktop for Windows from the official Docker site:

https://docs.docker.com/desktop/install/windows-install/

Download the Docker Desktop Installer.exe for Windows. Docker does not provide an MSI.

Wrap with the Content Prep Tool

IntuneWinAppUtil.exe -c "C:\AppSource\Docker" -s "Docker Desktop Installer.exe" -o "C:\IntunePackages"

Add the app in Intune

Intune Admin Centre → Apps → Windows → + Add → Windows app (Win32)
  1. Upload the .intunewin file
  2. Name: Docker Desktop
  3. Publisher: Docker Inc.
  4. Add the WSL 2 enablement script as a Dependency in the app requirements

Install and uninstall commands

⚙️
Program settings
[]
Install command--accept-license is required for silent deployment
"Docker Desktop Installer.exe" install --quiet --accept-license
Uninstall command
"Docker Desktop Installer.exe" uninstall --quiet
Install behaviour
System
Device restart behaviourDocker returns 3010 when reboot is needed
Determine behaviour based on return codes

Detection rule

🔍
File detection rule
[]
Rule type
File
Path
C:\Program Files\Docker\Docker
File or folder name
Docker Desktop.exe
Detection method
File or folder exists
💡
Test your detection rule first
Before deploying to users, install the app manually on a test device and verify the detection rule matches. Check the file path or registry key exists before assigning to a group.

Known gotchas

Docker Desktop licence requirement

Docker Desktop requires a paid subscription for organisations with more than 250 employees or more than $10M in annual revenue. Ensure your organisation has the correct Docker subscription before deploying at scale.

WSL 2 kernel update

On older Windows 10 builds, the WSL 2 Linux kernel may need a manual update package installed. Deploy the WSL 2 kernel update MSI from Microsoft before Docker Desktop if targeting older Windows 10 devices.

Frequently Asked Questions

Q: How do I deploy Docker Desktop silently via Intune?

Use: Docker Desktop Installer.exe install --quiet --accept-license. Docker Desktop uses its own installer format with specific switches. The --accept-license flag is required for silent deployment.

Q: What are the prerequisites for Docker Desktop deployment via Intune?

Docker Desktop on Windows requires Hyper-V or WSL 2. WSL 2 is the recommended backend. Enable WSL 2 and the Virtual Machine Platform Windows feature before deploying Docker Desktop - deploy these via Intune as a pre-requisite.

Q: How do I detect Docker Desktop in Intune?

Use a file detection rule: check for Docker Desktop.exe in C:\Program Files\Docker\Docker. Alternatively check the registry under HKLM\SOFTWARE\Docker Inc.\Docker Desktop.

Q: Does Docker Desktop require a reboot after Intune deployment?

Yes. Docker Desktop typically requires a reboot after installation to complete the WSL 2 integration and kernel component setup. Plan for a reboot in your deployment window.

More App Packaging Guides
→ Deploy Git for Windows via Intune→ Deploy PowerShell 7 via Intune
Installer typeEXE (proprietary)
WSL 2 prerequisiteMust enable before deploying
Silent installYes - install --quiet --accept-license
Docker licenceRequired for orgs 250+ employees
Reboot requiredYes - after WSL 2 enable and after install
// need intune set up properly?
Fixed-price Intune setup for UK businesses

I set up Intune for UK small businesses at a fixed price - app deployment, compliance policies, Conditional Access, and full documentation handed over at the end.

View Packages
#intune #app-packaging #win32