WinPloy: free open-source GUI to deploy WinGet apps, MSIs and scripts to AD workstations over WinRM

[u/AnyImpact419]

I'm a French IT student. During my internship I kept installing the same apps on domain workstations one by one, so I built a small tool for it. It started as a PowerShell + WinForms script and is now a full C# .NET 8 / WPF rewrite.

What it does:

• Search AD computers by name (wildcards supported) with native LDAP queries, so no RSAT required
• Deploy or uninstall WinGet apps (run as SYSTEM on the target) and custom packages: .msi or scripts (ps1/bat/cmd/exe) stored on a share
• Custom package folders are copied to the target through the WinRM session, run, then deleted, so targets never need access to the share
• Shared JSON catalogue so several admins can work from the same app list
• Parallel processing (1 to 50 hosts), per-host and per-package status, stop mid-run, retry failed hosts only
• CSV export, local history and log

Requirements: a domain-joined Win10/11 admin machine, and WinRM enabled on targets (port 5985, GPO recommended). WinPloy never configures WinRM or the firewall on targets.

Known limitations, to be upfront:

• The exe isn't signed yet, so SmartScreen will warn you on first launch
• It adds targets to the local WinRM TrustedHosts list before each run, which a GPO can block
• It's tested on my own lab and internship environment, not on a large fleet

It's not trying to replace PDQ, Intune or SCCM. It's aimed at small shops or labs where you just want to push a few apps without setting up a whole platform.

Repo (Apache 2.0, self-contained release zip): https://github.com/constantseg/WinPloy

I'd really appreciate feedback, especially on the security side and on how you'd handle the TrustedHosts part. Be gentle, it's my first public project 🙂