I have been looking for mass deploy Windows InTune client software. The only option that I had was with GPO. As we know the exe is not possible to deploy with GPO. Ok, we can play arouund with ZAP files or tranform exe to msi. In my opinion this is rather »walk-around« the »enginering aproach. So, how can we mass deploy InTune client with GPO. We need to extract the msi from exe. The command is »Windows_Intune_Setup.exe /Extract <destination-directory> ». The command extracts exe to x86 and x64 client msi install. Then we can deploy throw GPO. The »WindowsIntune.accountcert« file must be in the same folder share as described in document http://technet.microsoft.com/en-us/library/jj676611.aspx.
I have tested the deployment, and works good.