6.10. Deploy SAFEQ Cloud PC Client using Azure Intune

This guide describes how to silently deploy SAFEQ Cloud PC Client software on Windows 10/11 user devices being managed using Microsoft Intune.

1. Pre-requisites/requirements for customer

• Microsoft Intune & Active Directory Premium subscriptions.
• Windows 10/11 on user devices.
• Azure AD Joined, Windows 10/11 user devices, or Intune Company Portal for manual installation.
• Latest version for the SAFEQ Cloud PC Client software that you download from YSoft Partner Portal.

2. Configuration and deployment steps

Configuration and deployment of SAFEQ Cloud PC Client software to end user devices (Windows 10/11) using Microsoft Intune is a 3-steps process.

1. Package the .exe to a .intunewin file
2. Upload and create the Intune deployment
3. Assign it to profiles/user groups

Intune will silently deploy SAFEQ Cloud PC Client software on all workstations when the next sync happens.
Refer to the guidelines below to configure and deploy the SAFEQ Cloud PC Client software.

Create .intunewin file

Package the PC Client for MS Intune using the Microsoft-Win32-Content-Prep-Tool. This can be downloaded here
This command line tool guides you through the process. Ensure the PC Client is located in a folder with no other files present.
Example:

Please specify the source folder: C:\Users\%username%\Documents\Client
Please specify the setup file: hcpclient-3.17.0-release-setup.exe
Please specify the output folder: C:\Users\%username%\Documents\Output
Do you want to specify catalog folder (Y/N)? N

!Ensure there are no other files in the folder, or the intunewin creation tool will attempt to package everything and the subsequent install will fail.

Upload and create the Intune deployment

• Log into the Intune Portal – https://aka.ms/intuneportal
• Navigate to All Apps, and + Add
• Select App Type – Windows App (Win32) – Select
• Follow the Intune Portal to upload the created .intunewin file.
• Name and Describe the File accordingly, and add EveryonePrint A/S as the publisher.
• The Program section requires the Install Command, this is if you were running the installer as a command line, and all the install flags can be found in the SAFEQ Cloud Manual.
• At a minimum you would need primary/gateway and account domain address, however, setting login type, and denying access to config is recommended. Further information regarding silent installation can be found in the PC Client section of the manual

hcpclient-3.17.0-release-setup.exe /S /GATEWAYADDRESS=[GATEWAYADDRESS] /ACCOUNTDOMAIN=[DOMAIN]

• Uninstall command – “C:\Program Files\Y Soft Corporation\SAFEQ Cloud Client\uninstall.exe” /S
• Behaviour – User
• Device Restart Behaviour – None

Requirements

• OS Architecture – 64-bit & 32-bit
• Minimum OS – Win 10 1607

Detection Rules

We can detect the version of the PC Client by looking for a Registry entry. This enables different versions to be created to install over the top or use the supersedence feature in Intune.

• Registry = Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEQ Cloud Client
• Value name = DisplayVersion
• Detection method = Version Comparison
• Operator = Equals
• Value = 3.XX.X (where the X denotes the version of the PC Client being installed).

Assign the App to the required groups