Deploy the Windows agent with Microsoft Intune

On computers managed by Microsoft Intune, deploy the MSI as a Win32 app and the settings with the imported ADMX templates. Intune's menus change over time; also follow Microsoft's current documentation.

Step 1: package

IntuneWinAppUtil.exe -c <folder> -s AuthGuardDesktop-x64.msi -o <output>

Step 2: create the Win32 app

Assign it to a pilot group first.

Step 3: import the templates

1. Under Devices › Configuration › Import ADMX, add AuthGuardDesktop.admx and the ADML files.
2. Create a profile from the imported template with the settings you need (for example UpdateRing, UnlockGraceMinutes, SupportContact). The settings are described in Install through Group Policy.

The install token

The install command contains the token, which is a secret. Give it a short lifetime and a fitting computer count, and revoke it in the console when the rollout ends. Consider «Manual approval» if the package could be copied.

Update rings

Use Intune groups to put some pilot computers in the canary ring (the UpdateRing setting). See Agent updates.

Check

The computer appears under «Manage» › «Computers», «Active» or «Waiting for approval» depending on the token.