Deploy Tailscale to Microsoft Intune

Published by Tailscale in Security

Tailscale is a WireGuard based mesh VPN, used to connect your computers and other devices together securely without proxies.

Publisher: Tailscale
Homepage: Visit publisher website
License: BSD-3-Clause
Category: Security

Deployment details

Latest version: 1.104.4
Installer type: msi
Install scope: machine
Silent install arguments: /qn /norestart ALLUSERS=1
Install command: .\payload\Invoke-AppDeployToolkit.exe
Uninstall command: .\payload\Invoke-AppDeployToolkit.exe -DeploymentType Uninstall
Detection rule: The exact Intune detection rules generated for this PSADT package
App source: win32

Commands and arguments were captured during an automated QA install of version 1.104.2 in an isolated Windows VM.

Tested by IntuneGet QA

Passed

Version 1.104.2 tested on October 21, 2026.

VirusTotal scan of the installer hash: clean. 0 of 56 engines flagged it.

Package provenance

Installer SHA-256: 7EFF4ABDCBCF592AC9BCE28F2B9F0FD51F8FC09194C955FBE8253B67B531E7F5Check on VirusTotal
PSADT version: 4.1.8
Packaging commit: 1cc5fb513c
Package profile: 3797F85564C6EBA4...

IntuneGet verifies the installer SHA-256 before packaging and does not store the installer. The full evidence, including the recorded hash, is in the QA report.

Recent versions

1.104.4
1.104.2
1.104.1
1.102.3
1.102.2
1.98.2
1.96.3

How deployment works

IntuneGet packages Tailscale as a Win32 app and uploads it directly to your Microsoft Intune tenant. You review the package settings, configure assignments, and start the deployment from one guided workflow.