All Collections
Agents
Deploying Zluri Browser Agents through MS Intune
Deploying Zluri Browser Agents through MS Intune
This article explains how to deploy Zluri browser agents through MS Intune
C
Written by Chinmay Panda
Updated over a week ago

Please make sure that you have the windows machine enrolled in Intune and You have integrated Microsoft Intune with Zluri.

Please download the respective files from the links below.

https://zluri-prod-agent-builds.s3.us-west-2.amazonaws.com/zlurichrome2.2.1.intunewin

https://zluri-prod-agent-builds.s3.us-west-2.amazonaws.com/zluriedge2.2.1.intunewin

https://zluri-prod-agent-builds.s3.us-west-2.amazonaws.com/zlurifirefox2.2.3.intunewin

Adding the intunewin file to MS Intune.

This doc applies to all 3 browser agents:

  1. Chrome

  2. Edge

  3. Firefox

Note: In this doc, we’ve taken chrome.intunewin as example, only the file to be uploaded will change and rest of the steps are as is.

For edge, make sure to upload edge.intunewin

For Firefox, make sure to upload Firefox.intunewin

Step 1:

  • Click on Apps on the sidebar in order to add the application

  • Go to All Apps and click on Add. After clicking on the add button you will get to see the Select app type blade at the right side of the screen.

Step 2:

  • From the Select App blade choose the Windows app(Win 32) from the drop-down menu

  • click on the Select button at the bottom of the blade.

Step 3:

  • Then Click on Select App package file

  • Under the App information tab, Click on the upload button and upload the chrome intunewin file.

  • Click on OK

Step 4:Under App information tab

Fill in all the mandatory fields like Name, and Description with what you can remember.

  • Click on Next

Step 5:Under the Program tab

  • Make sure msiexec.exe /i zluriautoauth.intunwin /qn is present

  • In the Install Command field append /L*v “C:\zluri[browsername].log” ORG_TOKEN=<enter your orgtoken > MDMMACTYPE=microsoftintune

  • In the above command enter your org token without <>

  • In the Device restart behavior field choose No specific action from the drop-down menu.

  • Click on Next.

Step 6:Under the Requirements tab

  • Choose 32-bit and 64-bit as the Operating System architecture

  • Choose the minimum operating system available from the dropdown in the Minimum operating system field.

  • Click on Next

Step 7:Under Detection rules

  • In Rules format field Select Manually configure detection rules

  • Below “type “ field there is Add button, click on Add button

Step 8:Under the Detection rule pane

Under the pane select all the required fields

  • In the Rule type field select File from the drop-down menu

  • Chrome

    • In the Path field enter C:\ProgramData\ConfigZluriBE

    • In File or folder field BEConfig.ini

  • Firefox

    • In the Path field enter C:\ProgramData\FirefoxConfig

    • In File or folder field FirefoxConfig.ini

  • Edge

    • In the Path field enter C:\ProgramData\EdgeConfig

    • In File or folder field EdgeConfig.ini

  • Choose the Detection method as File or folder exists from the drop-down menu.

  • Click on OK

NOTE: In the screenshot, you’ll see ConfigZluri & AppConfig.INI but replace with the above mentioned directory name & .INI file for respective browser MSI instance

Step 9: Under Dependencies rules

  • Click on Next

Note: While Installing Browser Extension Intunewin, just click next to skip the Dependency tab as we don’t need it.

Step 10:Click Next for the Supersedence tab

Step 10:Under the Assignments tab

  • In the Required field -Click on “Add all users” and “Add all devices”

  • If there are any grouped enrolled devices click on “Add all users” and “add all devices” in the Available for enrolled devices field.

Step 11:Click on review and create

Now that the App is configured in MSIntune, it will install the .MSIs and do the following tasks:

  1. The [browsername].intunewin file will install the zluri web extension for respective browser

2. It will take the parameters passed, ORG_TOKEN & MDMMACTYPE and write it to the .INI file in the designated directory:

  • Chrome: C:\ProgramData\ConfigBE\*.ini

  • Edge: C:\ProgramData\EdgeConfig\*.ini

  • Firefox: C:\ProgramData\FirefoxConfig\*.ini

3. Then, the .intunewin will read the .ini file for ORG_TOKEN & MDMMACTYPE and fetch the system's serial number and pass all the parameters to the static page and save it.

4. After that, when the user opens the browser whenever, the zluri web extension will fetch the uuid/serial number, org_token, & mdm type from the static page and use it to auto authenticate you in zluri web extension context and close the zluri web extension tab

After silent installation and authentication user has to enable the extension in his Chrome / Firefox profile. This is a security requirement from the browsers and can not be passed.

In Edge also you will get a similar pop up where the user need to turn on the agent.

Did this answer your question?