Autodesk products can be deployed using VulnDetect Custom Software or PatchPro Advanced Customization. This guide covers both the initial installation and future patching of Autodesk products.
1. Acquire the Installation Files
Download the required installer from the Autodesk website or your organization’s Autodesk Account.
The download method varies between products:
Licensed products such as AutoCAD, AutoCAD LT, and Revit normally require access to an Autodesk Account with the appropriate subscription.
DWG TrueView is free and can be downloaded directly from Autodesk.
Autodesk may use different download and extraction methods depending on the product.
After downloading or extracting the Autodesk installer, you should have a folder containing all the installation files.
Compress the complete installer folder into a single .zip or .7z archive. Do not remove files or change the internal folder structure.
For a full installation, you need:
The Autodesk .zip or .7z installer package.
The universal Autodesk deployment script linked below.
Universal Autodesk deployment script:
https://stream.vulndetect.com/e/Deploy-AutodeskProduct.ps1
Deploy-AutodeskProduct.ps1
Note: This PowerShell script is provided as an example to assist with Autodesk deployments. It is not digitally signed and is not part of SecTeer's officially supported package library. We recommend testing it in your environment before deploying it broadly.
SHA-256: 1d51b8efad215ae69a23c88208188867cf4e710f702ec35c65ef1f9eee95f1d4
The script automatically extracts the archive, locates the Autodesk installer, runs it silently, and verifies the installation.
Important: Only include one Autodesk .zip or .7z package in each deployment.
2. Build the Deployment Configuration
-VulnDetect Custom Software
Create a new Custom Software configuration and give it a fitting name, for example:
Autodesk AutoCAD 2027 – English x64
Configure the deployment as follows:
Installation context: System
Main file: Deploy-AutodeskProduct.ps1
Additional file: The Autodesk .zip or .7z package
Installer command: The installer command should look like the example below. Remove any arguments from the Custom Installer Arguments field.
powershell.exe -NoLogo -NonInteractive -ExecutionPolicy Bypass -File .\Deploy-AutodeskProduct.ps1
The name of the Autodesk archive does not matter. The script automatically finds the included archive.
-PatchPro Advanced Customization
Locate Autodesk product in question under Available Applications and select it.
Open Customize and add:
Main file: Deploy-AutodeskProduct.ps1
Additional file: The Autodesk .zip or .7z package
Installer command: The installer command should look like the example below. Remove any arguments from the Custom Installer Arguments field.
powershell.exe -NoLogo -NonInteractive -ExecutionPolicy Bypass -File .\Deploy-AutodeskProduct.ps1
Publish the application and assign it in Intune.
Best practice is to test it on one or two devices before committing to a large-scale deployment.
3. Patch Autodesk Products
Most Autodesk products publish updates as an update.exe file. These updates can normally be deployed without the PowerShell script.
VulnDetect
Prepare and approve the update as follows:
Download the correct update.exe for the product, version, architecture, and language.
Locate the relevant Autodesk application under Approvals in VulnDetect.
Enable Customization using Custom Tag Approval.
Add update.exe as the main file.
Make sure the installation command is:
update.exe -q
Review the configuration and approve the update.
PatchPro
Prepare and publish the update as follows:
Download the correct update.exe for the product, version, architecture, and language.
Locate the relevant Autodesk application under Available Applications in PatchPro.
Select Custom Publish.
Add update.exe as the main file.
Make sure the installation command includes the -q argument:
update.exe -q
If you also have a configuration for deploying the full application, add (Update) to the name of the update configuration. This makes it easier to distinguish between the deployment and update configurations.
Review the configuration and publish the update.
Important: DWG TrueView Patching
DWG TrueView is handled differently.
Autodesk does not normally provide DWG TrueView updates as a separate update.exe package. Instead, the latest complete installer must be deployed.
To update DWG TrueView:
Download the latest complete DWG TrueView .zip or .7z installer.
Add Deploy-AutodeskProduct.ps1 as the main file.
Add the new DWG TrueView installer archive as the additional file.
Use the following installation command:
powershell.exe -NoLogo -NonInteractive -ExecutionPolicy Bypass -File .\Deploy-AutodeskProduct.ps1
The script detects the existing DWG TrueView installation, removes the older version when necessary, and installs the newer full release.
