DOCUMENTATION
- Home
- Documentation
- Zluri Agents
- Zluri Agents
- Deploying Zluri Browser Agents through MS Intune
Deploying Zluri Browser Agents through MS Intune
This article explains how to deploy Zluri browser agents through MS Intune
Please make sure that you have the Windows machine enrolled in Intune and you have integrated Microsoft Intune with Zluri.
Please download the respective files from the links below.
Adding the intunewin file to MS Intune.
This doc applies to all three browser agents:
Chrome
Edge
Firefox
Note: In this doc, we’ve taken chrome.intunewin as an example; only the file to be uploaded will change and the rest of the steps are as is.
For Edge, make sure to upload edge.intunewin
For Firefox, make sure to upload Firefox.intunewin
Step 1:
Click on Apps on the sidebar in order to add the application
Go to All Apps and click on Add. After clicking on the add button you will get to see the Select app type blade at the right side of the screen.
Step 2:
From the Select App blade, choose the Windows app(Win 32) from the drop-down menu
Click on the Select button at the bottom of the blade.
Step 3:
Then Click on Select App package file
Under the App information tab, Click on the upload button and upload the Chrome intunewin file.
Click on OK.
Step 4:
Under the App information tab
Fill in all the mandatory fields like Name and Description with what you can remember.
Click on Next
Step 5:
Under the Program tab
Make sure msiexec.exe /i zluriautoauth.intunwin /qn is present
In the Install Command field append /L*v “C:\zluri[browsername].log” ORG_TOKEN=<enter your orgtoken > MDMMACTYPE=microsoftintune
In the above command enter your org token without <>
In the Device restart behavior field choose No specific action from the drop-down menu.
Click on Next.
Step 6:
Under the Requirements tab
Choose 32-bit and 64-bit as the Operating System architecture
Choose the minimum operating system available from the dropdown in the Minimum operating system field.
Click on Next
Step 7:
Under Detection rules
In the Rules format field, Select Manually configure detection rules
Below the “type “ field there is an Add button, click on Add button
Step 8:
Under the Detection rule pane. Under the pane, select all the required fields
In the Rule type field, select File from the drop-down menu
Chrome
In the Path field, enter C:\ProgramData\ConfigZluriBE
In File or folder field BEConfig.ini
Firefox
In the Path field, enter C:\ProgramData\FirefoxConfig
In File or folder field FirefoxConfig.ini
Edge
In the Path field, enter C:\ProgramData\EdgeConfig
In File or folder field EdgeConfig.ini
Choose the Detection method as a File or folder exists from the drop-down menu.
Click on OK
NOTE: In the screenshot, you’ll see ConfigZluri & AppConfig.INI but replace them with the above-mentioned directory name & .INI file for the respective browser MSI instance
Step 9:
Under Dependencies rules
Click on Next
Note: While Installing Browser Extension Intunewin, just click next to skip the Dependency tab, as we don’t need it.
Step 10:
Click Next for the Supersedence tab
Step 11:
Under the Assignments tab
In the Required field -Click on “Add all users” and “Add all devices.”
If there are any grouped enrolled devices, click on “Add all users” and “Add all devices” in the Available for enrolled devices field.
Step 11:
Click on review and create
Now that the App is configured in MSIntune, it will install the .MSIs and do the following tasks:
The [browsername].intunewin file will install the Zluri web extension for the respective browser.
2. It will take the parameters passed, ORG_TOKEN & MDMMACTYPE and write it to the .INI file in the designated directory:
Chrome: C:\ProgramData\ConfigBE\*.ini
Edge: C:\ProgramData\EdgeConfig\*.ini
Firefox: C:\ProgramData\FirefoxConfig\*.ini
3. Then, the .intunewin will read the .ini file for ORG_TOKEN & MDMMACTYPE and fetch the system's serial number and pass all the parameters to the static page and save it.
4. After that, when the user opens the browser whenever, the Zluri web extension will fetch the uuid/serial number, org_token, & mdm type from the static page and use it to auto-authenticate you in Zluri web extension context and close the Zluri web extension tab.
After silent installation and authentication, the user has to enable the extension in his Chrome / Firefox profile. This is a security requirement from the browsers and can not be passed.
In Edge also you will get a similar pop-up where the user needs to turn on the agent.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article
This article explains how to deploy Zluri browser agents through MS Intune
Please make sure that you have the Windows machine enrolled in Intune and you have integrated Microsoft Intune with Zluri.
Please download the respective files from the links below.
Adding the intunewin file to MS Intune.
This doc applies to all three browser agents:
Chrome
Edge
Firefox
Note: In this doc, we’ve taken chrome.intunewin as an example; only the file to be uploaded will change and the rest of the steps are as is.
For Edge, make sure to upload edge.intunewin
For Firefox, make sure to upload Firefox.intunewin
Step 1:
Click on Apps on the sidebar in order to add the application
Go to All Apps and click on Add. After clicking on the add button you will get to see the Select app type blade at the right side of the screen.
Step 2:
From the Select App blade, choose the Windows app(Win 32) from the drop-down menu
Click on the Select button at the bottom of the blade.
Step 3:
Then Click on Select App package file
Under the App information tab, Click on the upload button and upload the Chrome intunewin file.
Click on OK.
Step 4:
Under the App information tab
Fill in all the mandatory fields like Name and Description with what you can remember.
Click on Next
Step 5:
Under the Program tab
Make sure msiexec.exe /i zluriautoauth.intunwin /qn is present
In the Install Command field append /L*v “C:\zluri[browsername].log” ORG_TOKEN=<enter your orgtoken > MDMMACTYPE=microsoftintune
In the above command enter your org token without <>
In the Device restart behavior field choose No specific action from the drop-down menu.
Click on Next.
Step 6:
Under the Requirements tab
Choose 32-bit and 64-bit as the Operating System architecture
Choose the minimum operating system available from the dropdown in the Minimum operating system field.
Click on Next
Step 7:
Under Detection rules
In the Rules format field, Select Manually configure detection rules
Below the “type “ field there is an Add button, click on Add button
Step 8:
Under the Detection rule pane. Under the pane, select all the required fields
In the Rule type field, select File from the drop-down menu
Chrome
In the Path field, enter C:\ProgramData\ConfigZluriBE
In File or folder field BEConfig.ini
Firefox
In the Path field, enter C:\ProgramData\FirefoxConfig
In File or folder field FirefoxConfig.ini
Edge
In the Path field, enter C:\ProgramData\EdgeConfig
In File or folder field EdgeConfig.ini
Choose the Detection method as a File or folder exists from the drop-down menu.
Click on OK
NOTE: In the screenshot, you’ll see ConfigZluri & AppConfig.INI but replace them with the above-mentioned directory name & .INI file for the respective browser MSI instance
Step 9:
Under Dependencies rules
Click on Next
Note: While Installing Browser Extension Intunewin, just click next to skip the Dependency tab, as we don’t need it.
Step 10:
Click Next for the Supersedence tab
Step 11:
Under the Assignments tab
In the Required field -Click on “Add all users” and “Add all devices.”
If there are any grouped enrolled devices, click on “Add all users” and “Add all devices” in the Available for enrolled devices field.
Step 11:
Click on review and create
Now that the App is configured in MSIntune, it will install the .MSIs and do the following tasks:
The [browsername].intunewin file will install the Zluri web extension for the respective browser.
2. It will take the parameters passed, ORG_TOKEN & MDMMACTYPE and write it to the .INI file in the designated directory:
Chrome: C:\ProgramData\ConfigBE\*.ini
Edge: C:\ProgramData\EdgeConfig\*.ini
Firefox: C:\ProgramData\FirefoxConfig\*.ini
3. Then, the .intunewin will read the .ini file for ORG_TOKEN & MDMMACTYPE and fetch the system's serial number and pass all the parameters to the static page and save it.
4. After that, when the user opens the browser whenever, the Zluri web extension will fetch the uuid/serial number, org_token, & mdm type from the static page and use it to auto-authenticate you in Zluri web extension context and close the Zluri web extension tab.
After silent installation and authentication, the user has to enable the extension in his Chrome / Firefox profile. This is a security requirement from the browsers and can not be passed.
In Edge also you will get a similar pop-up where the user needs to turn on the agent.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article