How to Deploy Triofox.AI Windows Client via Intune

Preparation: 

• Download the IntuneWinAppUtil.exe app which can be found at GitHub - microsoft/Microsoft-Win32-Content-Prep-Tool: A tool to wrap Win32 App and then it can be uploaded to Intune.
• Download the Windows Client Installer via the web portal by clicking the "Download Clients" button on the home page.

• Run IntuneWinAppUtil.exe and enter in the folder the installer file is in, windows client installer file name (KLWindowsClientInstaller.exe) and 'N' for specify catalog folder.

Intune Setup:

Navigate into the page for Intune in the Microsoft Azure web portal.

Navigate to App->All Apps->Create.

In the opened side panel, select "Windows app (Win32)" for App type. On the next screen, click "Select app package file" and upload the .intunewin we created previously. It should be in the same folder as the installer file.

Fill out all the required information (Name, Description and Publisher) and click "Next".

Enter the following for install and uninstall command:

• Install Command: KLWindowsClientInstaller.exe SilentInstall:true AcceptEula:true
• Uninstall Command: KLWindowsClientInstaller.exe -u silent:true

Also make sure that Install Behavior is set to System and not 'User' so that installation will work for non-admin users.

For "Check operating system architecture", select "Yes. Specify the systems the app can be installed on." and select "Install on x64 system". For "Minimum operating system", select the first option.

For Detection Rules, select "Manually configure detection rules" and select add. On the Detection Rule screen, enter the following 

• Rule type: File
• Path: C:\Program Files
• File or folder: Triofox.AI Windows Client
• Detection method: File or folder exists

Skip through "Dependencies" and "Supersedence". On "Assignments", click on "add group" under Required and add a group with all the users that need to install the windows client.

On the next page, double check that the information is correct and select create.

After upload is complete, the page should appear like this and any user that is a part of the group(s) added will get the windows client installed automatically on logging in to their machine.

Using Intune

Before you start, make sure the user has a valid Intune license as listed here. If a device is already Azure AD joined and logged in with a valid user, installation should take place automatically when the user logs on.

Otherwise, you need to connect the device to Azure AD/Entra ID first. On windows device, open the Settings app.

In Settings, navigate to Accounts->Access work or school->Connect.

Select "Join this Device to Microsoft Entra ID" and follow the instruction to sign in with the Azure user account. (See next section if there is an issue when signing in)

On the start menu, click on the current profile and select "switch user".

On the sign in screen, select "Other user" and sign in with Entra ID credentials.

Once logged in, wait a few moments and receive notification from Microsoft Intune software distribution.

It should be reflected on the Intune portal too after the installation is finished.

Why can't I sign in with Entra ID?

• The following error is likely due to a license error. Double check that the user has the required license for Intune.

• Error Code: 80192EE7. Your account was not setup in device because device management could not be enabled.
  • On Intune web portal, navigate to Devices->Windows->Device onboarding->Enrollment->Automatic Enrollment and disable WIP.