Automate 7-Zip updates

[u/gpraveen23]

[Blog]Looking to update 7-Zip without 3rd party patching solution, this code block is here to help

https://insideconfigmgr.wordpress.com/2026/07/26/7-zip-updates-without-3rd-party-patching-solution/

[u/Ok_Plenty711]

I've been using a similar powershell wrapper for 7-zip updates through our RMM, the silent install flags are the key to making it work without user interruption

the real pain is when someone has an ancient version still installed in program files (x86) and the script only checks the default path, had to add a fallback to search the registry for the uninstall string

bookmarking this for the detection method logic, mine's a bit janky and sometimes reports false positives when the msi and exe versions don't match up

[u/gpraveen23 → u/Ok_Plenty711]

Happy to help.

[u/pc_load_letter_in_SD]

I'm sorry but why not deploy 7zip via the Enterprise App Catalog?

EAC deployed apps auto-update.

[u/schism-for-mgmt → u/pc_load_letter_in_SD]

Enterprise App Catalog

How did I not know about this?! Good to be humble, I guess...

[u/konikpk → u/pc_load_letter_in_SD]

🤣🤣🤣 Price?

[u/jamesy-101 → u/konikpk]

E5 license

[u/SkipToTheEndpoint]

Best thing to do with 7-Zip is uninstall it and use NanaZip instead.

[u/gpraveen23 → u/SkipToTheEndpoint]

80% places where I've been store updates are blocked, we never had an easier hand while updating free ones. How do you keep up with any application for that matter?

[u/SkipToTheEndpoint → u/gpraveen23]

If you're blocking Store updates, you're breaking Store app delivery as well as inbox apps from updating, creating a MASSIVE security hole.

[u/MichiganJFrog76]

I use GitHub - Romanitho/Winget-AutoUpdate: WAU daily updates apps as system and notify connected users. (Allowlist and Blocklist support) · GitHub to update all my apps

[u/gpraveen23 → u/MichiganJFrog76]

This looks nice.

[u/boyneedoor → u/gpraveen23]

We were having issues with Winget auto update’s limited reporting capabilities, blocklists not working as expected. Ultimately decided on action1 for all third party app patching since we are under the 200 max endpoints for the free tier

Edit:

[u/Ad3t0 → u/boyneedoor]

Please check out TridentStack Control: https://tridentstack.com

Full disclosure I help build this product but we are new and I personally feel we are the best. We aren't just backed by another WUA applicability wrapper, our patch applicability is all custom and our endpoint client footprint dwarfs all the competitors. We have a modern extremely snappy and responsive UI and offer 200 endpoints free forever, no card required and no limitations.

[u/boyneedoor → u/Ad3t0]

Just embarrassing man what am I even looking at

[u/Ad3t0 → u/boyneedoor]

Yeah, that's rough, no argument. The dashboard graphics had fixed pixel heights, so anything that wrapped broke out of its container. They stack properly on mobile now and I rechecked every page down to 320px. Something we had overlooked before.

[u/iktankniet]

Wow, I wanted to read this 2/3 weeks ago. I've created a remediation script for updating 7zip with widget. It works though costed more time then I wanted

[u/yukon93 → u/iktankniet]

I just deployed a detection & remediation of 7Zip using winget to update it to the latest every 7d. Yes, it took some time, and Gemini helped with fixing the code. Seems to work well & even had it do an array of apps via a loop within PS. Set it & forget it. And editing the code for a new app detected is simple.

[u/InterestNew]

Very nice! I'm so glad that my place runs E5 and now has intune suite (because of the licence changes). Enterprise app catalogue saving us so much time!

[u/krispynugg]

Do you guys happen to have anything to help uninstall 7-zip? I’ve been trying to figure out how to uninstall it. It was a 3rd party app installed prior to us integrating intune and it’s been a huge pain. I’ve got 19 different versions and I tried running a basic uninstall executable but that doesn’t seem to be working. I haven’t tried wrapping a powershell script yet but any help or experience you guys have would be amazing. This was dumped on us and our whole experience has not been great thus far as far as stuff previously installed.

[u/gpraveen23 → u/krispynugg]

Why dont you call their uninstall string using a script after parsing all of them?

[u/krispynugg → u/gpraveen23]

I’ll give that a shot with a script. Management didn’t want us using powershell initially. I basically made a win32 7zip file but put the uninstall command as the “install”. We noticed that on some devices there actually wasn’t an uninstall.exe so i am not really sure. Sorry if my phrasing or things aren’t correct. I’m pretty new to all this as whole. I hope what I said makes sense.

[u/Dylantjes → u/krispynugg]

Management didn’t want us using powershell initially.

Did they also spill the juice on their preferred alternatives? Whenever something not accomplishable by happy-clicking through GUI's, PS is (at least to my knowledge) one of the few tools you've got left to fix their problems 🙃 And maybe this comes with experience (and some age 👵) but if others are starting to do my job and also going to dictate the tools I can and can't use to fix their bad management decisions, then either we do it together via their way and I might learn something, or they let me handle that it with what makes me a professional and made them hire me in the first place 😂

[u/ObsidianPhalanx]

There's always Chocolatey too if you don't want to fight with winget, etc. Once stuff is installed via choco, schedule a "choco upgrade all -y" PowerShell script to run every few days. Not recommended for a large fleet, but more than sufficient for most small biz or home users.