Deploying Zluri Browser Agents through MS Intune

This article explains how to deploy Zluri browser agents through MS Intune


Please make sure that you have the Windows machine enrolled in Intune and you have integrated Microsoft Intune with Zluri.

Please download the respective files from the links below.

 

Adding the intunewin file to MS Intune.

This doc applies to all three browser agents:

  1. Chrome

  2. Edge

  3. Firefox

 

Note: In this doc, we’ve taken chrome.intunewin as an example; only the file to be uploaded will change and the rest of the steps are as is.

 

For Edge, make sure to upload edge.intunewin

For Firefox, make sure to upload Firefox.intunewin

 

Step 1:

  • Click on Apps on the sidebar in order to add the application

  • Go to All Apps and click on Add. After clicking on the add button you will get to see the Select app type blade at the right side of the screen.

 

 

Step 2:

  • From the Select App blade, choose the Windows app(Win 32) from the drop-down menu 

  • Click on the Select button at the bottom of the blade.

 

 

Step 3:

  • Then Click on Select App package file 

  • Under the App information tab, Click on the upload button and upload the Chrome intunewin file.

  • Click on OK.

 

 

Step 4: 
Under the App information tab

Fill in all the mandatory fields like Name and Description with what you can remember.

  •  Click on Next

 

 

Step 5:
Under the Program tab

  • Make sure msiexec.exe /i zluriautoauth.intunwin /qn is present

  • In the Install Command field append /L*v “C:\zluri[browsername].log” ORG_TOKEN=<enter your orgtoken > MDMMACTYPE=microsoftintune

  • In the above command enter your org token without <>

  • In the Device restart behavior field choose No specific action from the drop-down menu.

  • Click on Next.

 

 

Step 6:
Under the Requirements tab

  • Choose 32-bit and 64-bit as the Operating System architecture

  • Choose the minimum operating system available from the dropdown in the Minimum operating system field.

  • Click on Next

 

 

Step 7:
Under Detection rules

  • In the Rules format field, Select Manually configure detection rules

  • Below the “type “ field there is an Add button, click on Add button

Step 8:
Under the Detection rule pane. Under the pane, select all the required fields

  • In the Rule type field, select File from the drop-down menu

  • Chrome

    • In the Path field, enter C:\ProgramData\ConfigZluriBE

    • In File or folder field BEConfig.ini

  • Firefox

    •  In the Path field, enter C:\ProgramData\FirefoxConfig

    • In File or folder field FirefoxConfig.ini

  • Edge

    • In the Path field, enter C:\ProgramData\EdgeConfig

    •   In File or folder field EdgeConfig.ini

   

  • Choose the Detection method as a File or folder exists from the drop-down menu.

  • Click on OK

 

NOTE: In the screenshot, you’ll see ConfigZluri & AppConfig.INI but replace them with the above-mentioned directory name & .INI file for the respective browser MSI instance

 

Step 9:
Under Dependencies rules

  • Click on Next

 

Note: While Installing Browser Extension Intunewin, just click next to skip the Dependency tab, as we don’t need it.

 

Step 10:
Click Next for the Supersedence tab

Step 11:
Under the Assignments tab

  • In the Required field -Click on “Add all users” and “Add all devices.”

  • If there are any grouped enrolled devices, click on “Add all users” and “Add all devices” in the Available for enrolled devices field.

 

 

 

 Step 11:
Click on review and create

 

Now that the App is configured in MSIntune, it will install the .MSIs and do the following tasks:

 

  1. The [browsername].intunewin file will install the Zluri web extension for the respective browser.

2. It will take the parameters passed, ORG_TOKEN & MDMMACTYPE and write it to the .INI file in the designated directory:

  • Chrome: C:\ProgramData\ConfigBE\*.ini

  • Edge: C:\ProgramData\EdgeConfig\*.ini

  • Firefox: C:\ProgramData\FirefoxConfig\*.ini

 

3. Then, the .intunewin will read the .ini file for ORG_TOKEN & MDMMACTYPE and fetch the system's serial number and pass all the parameters to the static page and save it.

 

4. After that, when the user opens the browser whenever, the Zluri web extension will fetch the uuid/serial number, org_token, & mdm type from the static page and use it to auto-authenticate you in Zluri web extension context and close the Zluri web extension tab.

 

 After silent installation and authentication, the user has to enable the extension in his Chrome / Firefox profile. This is a security requirement from the browsers and can not be passed.

 


 In Edge also you will get a similar pop-up where the user needs to turn on the agent.


Can’t find what you are looking for? Let us help you!

Deploying Zluri Browser Agents through MS Intune

Modified on Mon, 01 Apr 2024 at 10:53 PM

This article explains how to deploy Zluri browser agents through MS Intune


Please make sure that you have the Windows machine enrolled in Intune and you have integrated Microsoft Intune with Zluri.

Please download the respective files from the links below.

 

Adding the intunewin file to MS Intune.

This doc applies to all three browser agents:

  1. Chrome

  2. Edge

  3. Firefox

 

Note: In this doc, we’ve taken chrome.intunewin as an example; only the file to be uploaded will change and the rest of the steps are as is.

 

For Edge, make sure to upload edge.intunewin

For Firefox, make sure to upload Firefox.intunewin

 

Step 1:

  • Click on Apps on the sidebar in order to add the application

  • Go to All Apps and click on Add. After clicking on the add button you will get to see the Select app type blade at the right side of the screen.

 

 

Step 2:

  • From the Select App blade, choose the Windows app(Win 32) from the drop-down menu 

  • Click on the Select button at the bottom of the blade.

 

 

Step 3:

  • Then Click on Select App package file 

  • Under the App information tab, Click on the upload button and upload the Chrome intunewin file.

  • Click on OK.

 

 

Step 4: 
Under the App information tab

Fill in all the mandatory fields like Name and Description with what you can remember.

  •  Click on Next

 

 

Step 5:
Under the Program tab

  • Make sure msiexec.exe /i zluriautoauth.intunwin /qn is present

  • In the Install Command field append /L*v “C:\zluri[browsername].log” ORG_TOKEN=<enter your orgtoken > MDMMACTYPE=microsoftintune

  • In the above command enter your org token without <>

  • In the Device restart behavior field choose No specific action from the drop-down menu.

  • Click on Next.

 

 

Step 6:
Under the Requirements tab

  • Choose 32-bit and 64-bit as the Operating System architecture

  • Choose the minimum operating system available from the dropdown in the Minimum operating system field.

  • Click on Next

 

 

Step 7:
Under Detection rules

  • In the Rules format field, Select Manually configure detection rules

  • Below the “type “ field there is an Add button, click on Add button

Step 8:
Under the Detection rule pane. Under the pane, select all the required fields

  • In the Rule type field, select File from the drop-down menu

  • Chrome

    • In the Path field, enter C:\ProgramData\ConfigZluriBE

    • In File or folder field BEConfig.ini

  • Firefox

    •  In the Path field, enter C:\ProgramData\FirefoxConfig

    • In File or folder field FirefoxConfig.ini

  • Edge

    • In the Path field, enter C:\ProgramData\EdgeConfig

    •   In File or folder field EdgeConfig.ini

   

  • Choose the Detection method as a File or folder exists from the drop-down menu.

  • Click on OK

 

NOTE: In the screenshot, you’ll see ConfigZluri & AppConfig.INI but replace them with the above-mentioned directory name & .INI file for the respective browser MSI instance

 

Step 9:
Under Dependencies rules

  • Click on Next