Deploy Microsoft Azure Guest Proxy Agent - Allow List Tool to Microsoft Intune

Published by Microsoft in System

This project introduces the Guest Proxy Agent (GPA) to enhance the security of the Azure Instance Metadata Service and Azure Wireserver endpoints (available in Azure IaaS VM/VMSS).

Publisher: Microsoft
Homepage: Visit publisher website
License: MIT
Category: System

Deployment details

Latest version: 1.0.48
Installer type: portable
Install command: .\payload\Invoke-AppDeployToolkit.exe
Uninstall command: .\payload\Invoke-AppDeployToolkit.exe -DeploymentType Uninstall
Detection rule: The exact Intune detection rules generated for this PSADT package
App source: win32

Commands and arguments were captured during an automated QA install of version 1.0.48 in an isolated Windows VM.

Tested by IntuneGet QA

Passed

Version 1.0.48 tested on September 21, 2026.

VirusTotal scan of the installer hash: clean. 0 of 70 engines flagged it.

Package provenance

Installer source: github.com
Installer SHA-256: CB412EE4E5D33D1F67FBF52F8C49B9B6A565DB3275A67785958FEC309EB004ABCheck on VirusTotal
PSADT version: 4.1.8
Packaging commit: 5e561aeff9
Package profile: 9C8AA965C942F07D...

IntuneGet verifies the installer SHA-256 before packaging and does not store the installer. The full evidence, including the recorded hash, is in the QA report.

Recent versions

1.0.48
1.0.46
1.0.39

How deployment works

IntuneGet packages Microsoft Azure Guest Proxy Agent - Allow List Tool as a Win32 app and uploads it directly to your Microsoft Intune tenant. You review the package settings, configure assignments, and start the deployment from one guided workflow.