Windows installers, verified and tested before they reach your fleet.
Packwright watches publishers for new releases, verifies what it downloads, wraps it in a PSAppDeployToolkit package from a configuration you approve, then runs that package on a disposable Windows machine and keeps the evidence.
What happens to an application
- 1
Verify
The installer is downloaded from an approved publisher host and checked against its Authenticode signer, or the publisher's own SHA-256 where a release is unsigned.
- 2
Configure
Commands, exit codes, detection rules, messages and reboot behaviour are set per application, per customer, and saved as an immutable revision.
- 3
Approve
Install commands run as SYSTEM on every targeted device, so each revision is hashed and needs a recorded approval before anything is built from it.
- 4
Package
A versioned ZIP is generated from the hash-pinned official PSAppDeployToolkit template, with the publisher installer left byte-for-byte unchanged.
- 5
Validate
The package is installed, upgraded, repeated, uninstalled and reinstalled on a Windows machine that is restored from a clean snapshot first, and the logs and screenshots are kept.
What it does not do
Every screen separates researched software from verified installers and tested packages. Missing data stays visibly missing, and these limits are stated here for the same reason.
- It does not upload to Microsoft Intune.
- The output is a ZIP you upload yourself. The default log path and exit-code handling are chosen so the package behaves correctly once you do.
- It does not certify that software is safe.
- Signature verification, malware scanning and Windows testing are recorded as separate results with separate evidence. There is no combined verdict, because none of them provides one.
- It does not install anything on your fleet.
- It produces a package and the evidence that it works. Distributing it is your management system's job.
Built for managed service providers
Applications are curated once and configured per customer. Each customer's deployment profiles, approvals, packages and evidence are separated from every other customer's.