Deploy RANGA with Microsoft Intune

RANGA is available as a signed Windows Installer package (MSI) for Microsoft Intune and other deployment tools. It installs silently, per user, without admin rights, and only for the users you assign.

Download MSI (v1.0.27)
Publisher certificate (.cer)

Current release

Version1.0.27
Released16 October 2026
FileRangaInstall-v-1-0-27-0.msi (2.4 MB)
SHA-25639903112d2bce82307bf61bf13b40dad3a455dbfdc1ee99a11696dc2330aaaaf
Signed byPREVARA AUTOMATION (OPC) PRIVATE LIMITED

Checksums for all files: SHA256SUMS.txt. To verify a download, run:

Get-FileHash .\RangaInstall-v-1-0-27-0.msi -Algorithm SHA256

Requirements

  • Windows 10 or Windows 11
  • Microsoft 365 Apps or Office 2016 and later, 64-bit Excel (32-bit Office is not supported)
  • .NET Framework 4.8 or later (included in Windows 10 version 1903+ and Windows 11)
  • Visual Studio Tools for Office (VSTO) runtime (included with Microsoft 365 Apps and Office 2016+; otherwise deploy Microsoft’s “Visual Studio 2010 Tools for Office Runtime” as a Win32 app)

The installer checks these prerequisites and stops with a message if one is missing.

How the installer behaves

  • Per user, no admin rights. It runs as the signed-in user and writes only to that user’s profile:
    Files: %LOCALAPPDATA%\Prevara Automation\RANGA\
    Excel registration: HKCU\Software\Microsoft\Office\Excel\Addins\Prevara.RangaAddin
  • Only assigned users get RANGA. Other users on the same device are not affected.
  • Licensing is per user. Each user activates RANGA once inside Excel. The license is kept across upgrades and uninstalls.

Step 1 – Add the app in Intune

  1. In the Intune admin center, go to Apps → Windows → Add.
  2. App type: Line-of-business app. Upload the .msi file.
  3. Name: RANGA. Publisher: Prevara Automation.
  4. App install context: User (if Intune shows this option).
  5. Command-line arguments: leave empty. Ignore app version: No.
  6. Assignments: add your user group (for example Planners) as Required (installs automatically) or Available (users install it from Company Portal).

Detection is automatic, based on the MSI product code.

Step 2 – Trust the publisher

Without this step, each user sees one Office prompt the first time Excel loads RANGA: “Publisher: PREVARA AUTOMATION … Do you want to install this customization?” Adding the publisher certificate to the Trusted Publishers store removes it.

  1. Download the publisher certificate.
  2. Go to Devices → Configuration → Create → Windows 10 and later → Templates → Custom.
  3. Add an OMA-URI setting with data type String and this OMA-URI:
./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/0900927BC79BB85B49C9DCCD5F0BCB396C0FFF2E/EncodedCertificate

For the Value, use the Base64 content of the certificate on one line. You can produce it with:

[Convert]::ToBase64String([IO.File]::ReadAllBytes("prevara-publisher-2028.cer"))

Assign the profile to the devices of the users who receive RANGA. The certificate chains to SSL.com Root Certification Authority RSA, which is part of the Microsoft Trusted Root Program, so no root certificate needs to be deployed.

Without Intune, use Group Policy: Computer Configuration → Windows Settings → Security Settings → Public Key Policies → Trusted Publishers.

Step 3 – Verify on a test device

  1. Sign in as a test user from the assigned group and wait until the app shows as installed in Company Portal.
  2. Check that %LOCALAPPDATA%\Prevara Automation\RANGA\RANGA.vsto exists.
  3. Open Excel. The RANGA ribbon tab appears, with no prompt if Step 2 is applied.
  4. In Excel, File → Options → Add-ins → COM Add-ins lists RANGA as enabled.

Manual test outside Intune, as a standard user:

msiexec /i RangaInstall-v-1-0-27-0.msi /qn /l*v "%TEMP%\ranga-install.log"

Upgrades and removal

  • Upgrade: add the new MSI to the same Intune app, or create a new app that supersedes it. The new version replaces the old one automatically. User licenses are kept.
  • Uninstall: assign the app with Uninstall intent. Files and the Excel registration are removed; the user’s license entry stays in their profile.
  • Older installs (1.0.26 or earlier) were installed in Program Files. Upgrading from them asks for admin rights once to remove the old copy. Fresh installs and later upgrades do not need admin rights.

Limitations

  • Non-persistent virtual desktops (profiles reset at sign-out) are not supported, because the add-in is installed in %LOCALAPPDATA%.
  • AppLocker / WDAC: if DLL rules are enforced, allow %LOCALAPPDATA%\Prevara Automation\RANGA\.
  • 32-bit Office is not supported.

Troubleshooting

.NET Framework 4.8 or the VSTO runtime is missing on the device. Deploy the missing component, then retry.

Excel may have disabled the add-in. Check that HKCU\Software\Microsoft\Office\Excel\Addins\Prevara.RangaAddin\LoadBehavior is 3, and look under File → Options → Add-ins → Disabled Items.

The Trusted Publisher profile from Step 2 has not reached the device yet. Confirm the certificate is listed in certlm.msc → Trusted Publishers.

On the device, check Event Viewer → Applications and Services Logs → Microsoft → Windows → DeviceManagement-Enterprise-Diagnostics-Provider → Admin, or run the manual msiexec test above and review the log.

Release history

VersionReleasedDownloadNotes
1.0.2716 Oct 2026MSIFirst release for Intune: per-user install without admin rights; manifests signed with EV certificate.

Full product changes: Version history.

Support

Questions about deploying RANGA in your organisation? Contact us.