Skip to content
DockCrate
Sign inStart free

Docs

Getting started

Connect an Intune tenant to DockCrate, set up Pilot and Broad groups and publish your first app.

Current status

Honest status: the upload to a real Intune tenant has not been proven yet, the catalog shows demo data, and the VM check is pending until the Windows lab is attached. The FAQ lists what is and is not live.

Before you start

DockCrate by BufferSol publishes third-party apps to your own Intune tenant as Win32 apps. You need a Microsoft work account to sign in and a Global Admin to approve the connection once. New accounts start on the Free plan: 25 devices, 1 tenant and 15 catalog apps, with rings and rollback included.

Connect a tenant

Choose Connect a tenant in the app. If you are a Global Admin, approving the 3 requested permissions takes one click and the tenant shows as Connected within 60 seconds.

If you are not a Global Admin, use Send consent link to admin. We email the link, and the tenant shows Waiting for admin until it is approved. If consent is later removed, the tenant shows Disconnected and the owner is emailed.

Pick your Pilot and Broad groups

Rings are two Entra groups. Pilot receives each new version first. Broad receives it after a delay. Choose existing groups, or let us create DC-Pilot and DC-Broad for you.

Defaults are 0 hours for Pilot and 48 hours for Broad. A version reaches Broad only if Pilot failures stay under the threshold, which defaults to 10%. Otherwise Broad is paused and you get an alert.

Publish an app

Search the catalog, pick an app and choose Publish. The version is checked first (see How a version is checked), then created in your tenant as a Win32 app with detection rules and your Pilot and Broad assignments. App names carry the prefix DC | so they are easy to find in Intune.

Turn on auto update per app and per tenant to move later versions through Pilot and Broad automatically.

Roll back

Each app keeps its last 3 versions. Roll back re-assigns the earlier version as Required and sets the newer one to Uninstall for the affected ring. Every rollback is written to the audit log.

Next steps

Read Sign in and permissions for what each Graph permission allows. Read Billing for plans and the device meter. Webhooks and the API are for sending events and reading data in your own systems.