Guide for IT administrators

Requirements

• An x64 PC with Windows 10 version 2004, build 19041, or later, including Windows 11.
• A microphone. Running Wispim should need no admin rights and no extra runtime.
• For the organisation licence, PCs in Microsoft Entra ID: joined to your tenant, or with a work account from your tenant that the Windows user has added. A PC that is only in on-premises Active Directory, without Entra, will not work with the licence.
• Organisation licences work from the next version of Wispim for Windows.
• Disk space for speech models. No model ships with Wispim: each user downloads a language once, into their own models folder. 31 languages can be downloaded, about 31 MB to 1 GB each and about 51 MB to 1.6 GB once unpacked, so every user who adds a language holds a copy of it.

Installing through Intune

Add the Store listing in Intune as Microsoft Store app (new). Intune searches the Store through the winget source and installs with the Windows Package Manager. Assign it as Required, as Available, which shows it in Company Portal, or as Uninstall, in device or user context.

Intune’s Store integration installs free apps only. Wispim is free to install and Pro is an in-app purchase, so it should qualify. Updates come from the Store.

The listing is public. The Store catalogue that winget uses returns Wispim as 9P6QK0HL20NF, installer type msstore, x64. We have checked the catalogue, but we have not yet added Wispim in a real Intune tenant.

Microsoft’s own steps are on Microsoft Learn: adding Microsoft Store apps to Intune.

Putting the licence on your PCs

The licence is one registry value for the whole machine, under the policy key, where only administrators, Intune and Group Policy can write:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Wispim
a string value, REG_SZ, named OrganizationLicense, whose data is the text of licence.txt.

With each licence you receive licence.txt, Install-WispimLicence.ps1, WispimLicence.reg and a README. Pick one way:

1. In Intune, go to Devices › Scripts and remediations › Platform scripts › Add, for Windows 10 and later. Upload Install-WispimLicence.ps1, set “Run this script using the logged on credentials” to No, and assign it to the device groups that use Wispim. The script writes the 64-bit registry view whichever PowerShell host runs it.
2. With Group Policy, under Computer Configuration › Preferences › Windows Settings › Registry, add a String value with the key and name above and the text of licence.txt as its data.
3. On one PC, run WispimLicence.reg as an administrator.

How Wispim reads the licence

• Wispim reads the value when it starts and whenever its window is activated.
• It checks the signature with a public key it carries, the end date, and, through Windows’ own NetGetAadJoinInformation, that the PC is joined to a tenant the licence names or that the Windows user added a work account from that tenant. Nothing is sent anywhere.
• Settings › Pro then reads “Licensed to <organisation> through <date>”. If the licence is on the PC but does not apply, the same tab says why: it ended, it is for another organisation, or it is not valid.
• The number of users is not counted on the PC. Assign the app and the script to no more users than the licence covers.
• To renew, deploy the new licence the same way before the end date. It replaces the old value.
• Removing the value ends Pro at the next read, unless the user bought Pro in the Microsoft Store.

We have not yet tried the licence on a PC joined to a real organisation’s tenant. If it behaves differently on yours, write to support@wispim.com.

Network

Two parts of Wispim’s own code open a connection: the speech model download, from alphacephei.com, and the analytics, which stay off until the user turns them on. Wispim has no update check and fetches nothing else at start.

• The Store hosts are the Microsoft Store section of Intune’s list of network endpoints. Whether that list is complete for the Store’s licence check is unverified. Do not apply SSL inspection to them.
• Analytics are usage statistics not linked to you. They never include script text, transcripts or audio.
• To stop model downloads, block alphacephei.com at the firewall or proxy: Wispim has no policy, registry value or setting for it. Sound and Constant modes should still work then, and Voice mode should have no offline speech. A proxy that asks for a sign-in, or answers with a redirect, also makes the download fail.
• The download is not pinned to a checksum, because Alpha Cephei publishes none. Wispim downloads only over HTTPS from that one host, follows no redirect, cuts off a file over four times its listed size, and checks the folder’s shape before importing it.
• Microsoft online speech is off by default in Wispim, and Windows’ own switch is the administrator’s control. To keep it off for every user, set the Group Policy “Allow users to enable online speech recognition services” to Disabled, under Computer Configuration › Administrative Templates › Control Panel › Regional and Language Options. That this also stops Wispim’s online engine is still to be checked on a PC.
• Wispim never logs script text, transcripts or audio, and never uploads scripts.