Intune-Scripts VS Misc.-Tools

winget scripts and deploy my premade intunewin file, modify the detection script for the relevant winget id

I'm running a modified version of this script to map my certificates against computer and user objects for now. I hope they address this soon, it seems like functionality that could easily be built into the connector.

Yep as others have said, use a dynamic group. I use PowerShell to create the group https://github.com/djust270/Intune-Scripts/blob/master/Create-IntuneUsersDynamicGroup.ps1

If anyone is interested, I found a workaround by manually mapping the X509IssuerSerialNumber as mentioned in the KB. I found this blog with a link to a script https://system32.blog/post/adsmapcertificates/ which I modified to work with NDES requested certs. I had to change a couple of the variables to suit my needs, you can find my script here https://github.com/djust270/Intune-Scripts/blob/master/Invoke-ADCSCertMappingNDES.ps1

My script for updating apps https://github.com/djust270/Intune-Scripts/blob/master/Winget-UpgradeSelect.ps1

What are you using for the detection method? I recommend using the sample detection script in my repo. https://github.com/djust270/Intune-Scripts/blob/master/Winget-InstallDetection.ps1

Alternatively, you can use the uninstall information in the registry if you prefer. Check my script here for ideas https://github.com/djust270/Misc.-Tools/blob/main/Inovke-QuietUninstall.ps1

Misc.-Tools/Check-OneDriveSyncHealth.ps1 at main · djust270/Misc.-Tools (github.com)

Here's a sample script that can be run through scheduled task or proactive remediation to keep a predefined list of apps updated using WinGet https://github.com/djust270/Misc.-Tools/blob/main/Winget-UpdateAppListAsSystem