{"id":353,"date":"2025-01-25T11:33:48","date_gmt":"2025-01-25T11:33:48","guid":{"rendered":"https:\/\/www.digitalsaviour.co.uk\/blog\/?p=353"},"modified":"2025-01-25T11:37:32","modified_gmt":"2025-01-25T11:37:32","slug":"update-7-zip-automatically","status":"publish","type":"post","link":"https:\/\/www.digitalsaviour.co.uk\/blog\/2025\/01\/25\/update-7-zip-automatically\/","title":{"rendered":"Update 7-Zip Automatically"},"content":{"rendered":"\n

I still don\u2019t understand why developers do not have an option to auto-update their apps. Especially when it\u2019s a simple solution that is required.<\/p>\n\n\n\n

Recently I was asked to upgrade hundreds of Intune managed devices 7-Zip installations. Some were over three years since they were last updated. 7-Zip does not have any natively automated process to do an update however the update is as simple as running the setup of the latest version from the 7-Zip website<\/a>.<\/p>\n\n\n\n

With this in mind it would be easy enough to package the latest version of 7-Zip as a Win32 app and deploy it using Intune or whatever RMM or MDM you are using however this would only update to the version packaged.<\/p>\n\n\n\n

The better option would be an automated process or scheduled task that will download the very latest version from the 7-Zip website and install it.<\/p>\n\n\n\n

<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
# <\/span>Ensure<\/span> <\/span>the<\/span> <\/span>script<\/span> <\/span>uses<\/span> <\/span>TLS<\/span> <\/span>1.2<\/span><\/span>\n[<\/span>Net<\/span>.<\/span>ServicePointManager<\/span>]::<\/span>SecurityProtocol<\/span> <\/span>=<\/span> [<\/span>Net<\/span>.<\/span>SecurityProtocolType<\/span>]::<\/span>Tls12<\/span><\/span>\n<\/span>\n$dlurl<\/span> <\/span>=<\/span> <\/span>'<\/span>https:\/\/7-zip.org\/<\/span>'<\/span> <\/span>+<\/span> (<\/span>Invoke<\/span>-<\/span>WebRequest<\/span> <\/span>-<\/span>UseBasicParsing<\/span> <\/span>-<\/span>Uri<\/span> <\/span>'<\/span>https:\/\/7-zip.org\/<\/span>'<\/span> <\/span>|<\/span> <\/span>Select<\/span>-<\/span>Object<\/span> <\/span>-<\/span>ExpandProperty<\/span> <\/span>Links<\/span> <\/span>|<\/span> <\/span>Where<\/span>-<\/span>Object<\/span> <\/span>{<\/span>($_.outerHTML -match <\/span>'<\/span>Download<\/span>'<\/span>)-and ($_.href -like <\/span>\"<\/span>a\/*<\/span>\"<\/span>) -and ($_.href -like <\/span>\"<\/span>*-x64.exe<\/span>\"<\/span>)} | Select-Object -First 1 | Select-Object -ExpandProperty href)<\/span><\/span>\n<\/span>\n$installerPath = Join-Path $env<\/span>:<\/span>TEMP<\/span> (<\/span>Split<\/span>-<\/span>Path<\/span> <\/span>$dlurl<\/span> <\/span>-<\/span>Leaf<\/span>)<\/span><\/span>\nInvoke<\/span>-<\/span>WebRequest<\/span> <\/span>$dlurl<\/span> <\/span>-<\/span>OutFile<\/span> <\/span>$installerPath<\/span><\/span>\nStart<\/span>-<\/span>Process<\/span> <\/span>-<\/span>FilePath<\/span> <\/span>$installerPath<\/span> <\/span>-<\/span>Args<\/span> <\/span>\"<\/span>\/S<\/span>\"<\/span> <\/span>-<\/span>Verb<\/span> <\/span>RunAs<\/span> <\/span>-<\/span>Wait<\/span><\/span>\n<\/span>\nRemove<\/span>-<\/span>Item<\/span> <\/span>$installerPath<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
Now we download the installer and run it silently and wait for it to finish. Once the setup exists we remove the installer file to clean things up.<\/p>\n\n\n\n
Deploying the update<\/h2>\n\n\n\n
You can deploy this script however you wish but I would recommend that it runs at regular intervals to make sure that 7-Zip is as up to date as possible.<\/p>\n\n\n\n
One method would be to deploy the file to your devices and create a scheduled task. Make sure it runs with the highest permissions so as System would be recommended.<\/p>\n\n\n\n
Using Intune to deploy<\/h2>\n\n\n\n
If you deploy as a Script in Intune it will only run once which is great to bring devices up to the latest version one time however if we deploy as a remediation it will keep the device up to date.<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
# <\/span>Check<\/span> <\/span>if<\/span> 7<\/span>Zip<\/span> <\/span>is<\/span> <\/span>installed<\/span> <\/span>for<\/span> <\/span>use<\/span> <\/span>as<\/span> remediation in Update<\/span>-<\/span>7<\/span>Zip<\/span><\/span>\n<\/span>\n$commonPaths<\/span> <\/span>=<\/span> <\/span>@<\/span>(<\/span><\/span>\n        <\/span>\"<\/span>C:<\/span>\\P<\/span>rogram Files<\/span>\\7<\/span>-Zip<\/span>\\7<\/span>z.exe<\/span>\"<\/span>,<\/span><\/span>\n        <\/span>\"<\/span>C:<\/span>\\P<\/span>rogram Files (x86)<\/span>\\7<\/span>-Zip<\/span>\\7<\/span>z.exe<\/span>\"<\/span><\/span>\n    )<\/span><\/span>\n    <\/span><\/span>\nforeach<\/span> (<\/span>$path<\/span> <\/span>in<\/span> <\/span>$commonPaths<\/span>) <\/span>{<\/span><\/span>\n    <\/span>if<\/span> (<\/span>Test<\/span>-<\/span>Path<\/span> <\/span>-<\/span>Path<\/span> <\/span>$path<\/span>) <\/span>{<\/span><\/span>\n        <\/span>Write<\/span>-<\/span>Output<\/span> <\/span>\"<\/span>7-Zip is installed at $path<\/span>\"<\/span><\/span>\n<\/span>\n        # <\/span>7<\/span>-<\/span>Zip<\/span> <\/span>is<\/span> <\/span>installed<\/span><\/span>\n        <\/span>Exit<\/span> <\/span>1<\/span><\/span>\n    <\/span>}<\/span><\/span>\n}<\/span><\/span>\n<\/span>\n# <\/span>7<\/span>-<\/span>Zip<\/span> <\/span>is<\/span> <\/span>not<\/span> <\/span>installed<\/span><\/span>\nWrite<\/span>-<\/span>Output<\/span> <\/span>\"<\/span>7-Zip not detected<\/span>\"<\/span><\/span>\nExit<\/span> <\/span>0<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
This script is the detection script and will check if 7-Zip is installed. If you find installations in other paths you can change the $commonPaths array to include them.<\/p>\n\n\n\n
The remediation script is the same as the first script above.<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
# <\/span>Ensure<\/span> <\/span>the<\/span> <\/span>script<\/span> <\/span>uses<\/span> <\/span>TLS<\/span> <\/span>1.2<\/span><\/span>\n[<\/span>Net<\/span>.<\/span>ServicePointManager<\/span>]::<\/span>SecurityProtocol<\/span> <\/span>=<\/span> [<\/span>Net<\/span>.<\/span>SecurityProtocolType<\/span>]::<\/span>Tls12<\/span><\/span>\n<\/span>\n$dlurl<\/span> <\/span>=<\/span> <\/span>'<\/span>https:\/\/7-zip.org\/<\/span>'<\/span> <\/span>+<\/span> (<\/span>Invoke<\/span>-<\/span>WebRequest<\/span> <\/span>-<\/span>UseBasicParsing<\/span> <\/span>-<\/span>Uri<\/span> <\/span>'<\/span>https:\/\/7-zip.org\/<\/span>'<\/span> <\/span>|<\/span> <\/span>Select<\/span>-<\/span>Object<\/span> <\/span>-<\/span>ExpandProperty<\/span> <\/span>Links<\/span> <\/span>|<\/span> <\/span>Where<\/span>-<\/span>Object<\/span> <\/span>{<\/span>($_.outerHTML -match <\/span>'<\/span>Download<\/span>'<\/span>)-and ($_.href -like <\/span>\"<\/span>a\/*<\/span>\"<\/span>) -and ($_.href -like <\/span>\"<\/span>*-x64.exe<\/span>\"<\/span>)} | Select-Object -First 1 | Select-Object -ExpandProperty href)<\/span><\/span>\n<\/span>\n$installerPath = Join-Path $env<\/span>:<\/span>TEMP<\/span> (<\/span>Split<\/span>-<\/span>Path<\/span> <\/span>$dlurl<\/span> <\/span>-<\/span>Leaf<\/span>)<\/span><\/span>\nInvoke<\/span>-<\/span>WebRequest<\/span> <\/span>$dlurl<\/span> <\/span>-<\/span>OutFile<\/span> <\/span>$installerPath<\/span><\/span>\nStart<\/span>-<\/span>Process<\/span> <\/span>-<\/span>FilePath<\/span> <\/span>$installerPath<\/span> <\/span>-<\/span>Args<\/span> <\/span>\"<\/span>\/S<\/span>\"<\/span> <\/span>-<\/span>Verb<\/span> <\/span>RunAs<\/span> <\/span>-<\/span>Wait<\/span><\/span>\n<\/span>\nRemove<\/span>-<\/span>Item<\/span> <\/span>$installerPath<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
Deploy this to all devices for completion and make sure it runs weekly or however often you want to check for updates.<\/p>\n\n\n\n
Do you have a better way to do this? Post in the comments below if you have any suggestions.<\/p>\n<\/body>","protected":false},"excerpt":{"rendered":"
The discussion highlights the lack of automated update options for 7-Zip installations across managed devices. The author shares a script to periodically check for and install the latest version using Intune, emphasizing the need for such automation. Suggestions for improvement and alternative methods are invited from readers.<\/p>\n","protected":false},"author":1,"featured_media":354,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[23,30],"tags":[45,44,26,42,41,43],"class_list":["post-353","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-powershell","category-remediation","tag-7-zip","tag-7zip","tag-intune","tag-powershell","tag-remediation-script","tag-windows"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t
This code will first of all enabled TLS1.2 for older OS. This is necessary for the download to work using Invoke-WebRequest. Next we pull the web page download from 7-zip.org<\/a> and then parse it to find the download link (In case it ever changes).<\/p>\n\n\n\n