1. Acquire the Installation Files

Download the required installer from the Autodesk website or your organization’s Autodesk Account.

The download method varies between products:

• Licensed products such as AutoCAD, AutoCAD LT, and Revit normally require access to an Autodesk Account with the appropriate subscription.
• DWG TrueView is free and can be downloaded directly from Autodesk.
• Autodesk may use different download and extraction methods depending on the product.

After downloading or extracting the Autodesk installer, you should have a folder containing all the installation files.

Compress the complete installer folder into a single .zip or .7z archive. Do not remove files or change the internal folder structure.

For a full installation, you need:

• The Autodesk .zip or .7z installer package.
• The universal Autodesk deployment script linked below.

Universal Autodesk deployment script:
https://stream.vulndetect.com/e/Deploy-AutodeskProduct.ps1
Deploy-AutodeskProduct.ps1

Note: This PowerShell script is provided as an example to assist with Autodesk deployments. It is not digitally signed and is not part of SecTeer's officially supported package library. We recommend testing it in your environment before deploying it broadly.
SHA-256: 1d51b8efad215ae69a23c88208188867cf4e710f702ec35c65ef1f9eee95f1d4

The script automatically extracts the archive, locates the Autodesk installer, runs it silently, and verifies the installation.

Important: Only include one Autodesk .zip or .7z package in each deployment.

2. Build the Deployment Configuration

-VulnDetect Custom Software

Create a new Custom Software configuration and give it a fitting name, for example:

Autodesk AutoCAD 2027 – English x64

Configure the deployment as follows:

• Installation context: System
• Main file: Deploy-AutodeskProduct.ps1
• Additional file: The Autodesk .zip or .7z package
• Installer command: The installer command should look like the example below. Remove any arguments from the Custom Installer Arguments field.

powershell.exe -NoLogo -NonInteractive -ExecutionPolicy Bypass -File .\Deploy-AutodeskProduct.ps1

The name of the Autodesk archive does not matter. The script automatically finds the included archive.

-PatchPro Advanced Customization

Locate Autodesk product in question under Available Applications and select it.

Open Customize and add:

• Main file: Deploy-AutodeskProduct.ps1
• Additional file: The Autodesk .zip or .7z package
• Installer command: The installer command should look like the example below. Remove any arguments from the Custom Installer Arguments field.

powershell.exe -NoLogo -NonInteractive -ExecutionPolicy Bypass -File .\Deploy-AutodeskProduct.ps1

Publish the application and assign it in Intune.

Best practice is to test it on one or two devices before committing to a large-scale deployment.

3. Patch Autodesk Products

Most Autodesk products publish updates as an update.exe file. These updates can normally be deployed without the PowerShell script.

VulnDetect

Prepare and approve the update as follows:

1. Download the correct update.exe for the product, version, architecture, and language.
2. Locate the relevant Autodesk application under Approvals in VulnDetect.
3. Enable Customization using Custom Tag Approval.
4. Add update.exe as the main file.
5. Make sure the installation command is:

update.exe -q

6. Review the configuration and approve the update.

PatchPro

Prepare and publish the update as follows:

1. Download the correct update.exe for the product, version, architecture, and language.
2. Locate the relevant Autodesk application under Available Applications in PatchPro.
3. Select Custom Publish.
4. Add update.exe as the main file.
5. Make sure the installation command includes the -q argument:

update.exe -q

6. If you also have a configuration for deploying the full application, add (Update) to the name of the update configuration. This makes it easier to distinguish between the deployment and update configurations.
7. Review the configuration and publish the update.

Important: DWG TrueView Patching

DWG TrueView is handled differently.

Autodesk does not normally provide DWG TrueView updates as a separate update.exe package. Instead, the latest complete installer must be deployed.

To update DWG TrueView:

• Download the latest complete DWG TrueView .zip or .7z installer.
• Add Deploy-AutodeskProduct.ps1 as the main file.
• Add the new DWG TrueView installer archive as the additional file.
• Use the following installation command:

powershell.exe -NoLogo -NonInteractive -ExecutionPolicy Bypass -File .\Deploy-AutodeskProduct.ps1

The script detects the existing DWG TrueView installation, removes the older version when necessary, and installs the newer full release.