Deploying EnforceDNS Agent for Windows with Microsoft Intune

Introduction

Welcome to the comprehensive guide on deploying EnforceDNS Agent Software for Windows using

Microsoft Intune. In this document, we will walk you through the step-by-step process of efficiently and

securely mass-deploying the EnforceDNS Agent Software for Windows and related configurations across

your Windows devices by harnessing the powerful capabilities of Microsoft Intune.

Deploying the EnforceDNS Agent

1. Download the EnforceDNS Agent for Windows from the UI by navigating to Settings >

   EnforceDNS Agent > Install > EnforceDNS Agent x.x.x, Windows 64-bit

2. Create the following folder structure. Copy the .msi file into the “Source” folder (the folder should

   only contain this .msi file).

3. Create an empty “Intune” folder for the output.

4. Convert the Win32 app content:

   1. Use the Microsoft Win32 Content Prep Tool to preprocess Windows classic (Win32) apps. The tool

      converts application installation files into the .intunewin format, which will be uploaded to the

      Microsoft Intune admin center.

   2. For information on how to download and use the Win32 Content Prep Tool, visit the following link.

      https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool

5. Running the Microsoft Win32 Content Prep Tool:

   1. If you run IntuneWinAppUtil.exe from the command window without parameters, the tool will guide you to enter the required parameters step by step.

      1. When prompted, enter the source folder path you created earlier.

      2. Enter the name of the installer file from the source folder.

      3. Provide the Intune folder path you created earlier.

      4. Answer N to the "specify catalog folder" question.

6. Obtain the “MsiProductCode” from the .intunewin file:

   1. Copy the .intunewin file to a temporary folder.

   2. Rename the .intunewin file to add .zip to the filename. E.g., myapp.intunewin would change to myapp.intunewin.zip.

   3. Unzip the file. Open the Detection.xml file in a text editor and copy the value inside the

      MsiProductCode element.

7. Add a Win32 app to Untune:

   1. Sign in to the Microsoft Intune admin center.

   2. Select Apps > All apps > Add.

   3. On the "Select app type" pane, under Other app types, select Windows app (Win32).

8. Select the app package file:

   1. Click Select app package file.

   2. Browse to the .intunewin file you created earlier and select it.

9. Set app information

   1. Name: Enter the app's name.

   2. Publisher: Enter "HYAS".

   3. Category: Select an appropriate app category.

10. Program page:

    1. Install command:

       1. msiexec /i "HYAS-Protect-latest.msi" /qn CLIENTID=XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
          

       2. Replace the CLIENTID with your organizationʼs Install Key, which can be found on the HYAS portal at

          Settings > EnforceDNS Agent > Install > Install Key.

11. Set Requirements and Detection rules:

    1. Set the requirements and detection rules for the app, as required by your organization.

12. Assign app groups:

    1. Choose the groups of users or devices that will receive the app.

13. Review and create:

    1. After reviewing your settings, click Create to add the app to Intune.