Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Deploying Worry Free Business Security Services Agent in Azure via Microsoft Intune

    • Updated:
    • 3 Sep 2019
    • Product/Version:
    • Platform:
    • Windows 10
Summary

Learn how to deploy Security Agents via Line-of-Business App on Intune interface for Windows 10 machines enrolled in Azure.

Details
Public
 

Prior to deployment, make sure the client machine is enrolled to Azure. Below are the pre-requisites:

  • Microsoft Intune subscription – (sign up for a free trial account).
  • Create a user, and create a group.

Reference: Official product documentation for Microsoft Intune

 
Sign in to the Intune as a Global Administrator or an Intune Service Administrator. If an Intune Trial subscription is created, the account created with the subscription is the Global administrator.

Set up Windows 10 automatic enrollment

Use MDM enrollment so that both corporate and bring-your-own-devices can be automatically enrolled.

 
Signing up for Azure Active Directory Premium subscription is required. Azure AD premium supports “Automatic enrollment”.

Reference: Set up enrollment for Windows devices 

  1. In Azure, choose Azure Active Directory > Mobility (MDM and MAM).
  2. Select Microsoft Intune.

    Microsoft Intune

  3. Select "Some" from the MDM user scope to use MDM auto-enrollment to manage enterprise data on employees' Windows devices. MDM auto-enrollment will be configured for AAD joined devices and bring your own device scenarios.

    MDM user scope

     
    "Some” is used as the User scope to allow admin to have flexibility on which groups to have the automatic enrollment feature.

    Reference: Enable Windows 10 automatic enrollment

  4. Choose Select groups > [Customized group] > Select as the assigned group.

    assigned group

  5. Select Some from the MAM Users scope to manage data on workforce's devices.
  6. Choose Select groups > [Customized group] > Select as the assigned group.
  7. Use the default values for the remaining configuration values.
  8. Click Save.
  9. Select Microsoft Intune Enrollment.

    Intune Enrollment

  10. Choose Select groups > [Customized group] > Select as the assigned group.

    assigned group

  11. Use the default values for the remaining configuration values.
  12. Click Save.

Take the role of an Intune user and enroll a Windows 10 device into Microsoft Intune. Then return to Intune and confirm the device enrolled.

Confirm Windows 10 Desktop version

Before enrolling Windows 10 Desktop, confirm the version of Windows that you have installed.

  1. Right-click the Windows Start icon and click Settings to display Windows Settings options.

    Windows Settings

  2. Select System > About.

    System > About

  3. The Settings window will show a list of Windows specifications for PC. Within this list, locate the Version.
  4. Confirm that the Windows 10 version is 1607 or higher.
     
    The steps presented in this guild are for Windows 10 version 1607 or higher, if version is 1511 or less, continue with these steps.

Enroll Windows 10 Desktop

  1. Return to Windows Settings and select Accounts.

    Accounts

  2. Select Access work or school > Connect.

    Connect

  3. Select Join this device to Azure Active Directory.

    Join

  4. Sign in to Intune with work or school account (as Intune user), and then click Next. If the method followed is create a user and assign a license quickstart, the user account created can be used to sign in.

    account

    password

    confirm organization

  5. When the "You’re all set!" screen appears, click Done.

    complete

  6. The added account will be shown as part of the Access work or school settings on the Windows Desktop.

    access

     
    Use the Azure Active Directory (AAD) account to Sign in this Desktop.
    If the previous steps are followed, but still cannot access work or school email account and files, follow the steps in Troubleshooting steps to follow if you see Access work or school
    Reference: What is Azure Active Directory?

Confirm your device enrollment in Intune

  1. Sign in to Intune
  2. Select Devices to view the enrolled devices in Intune.
  3. Verify that there is an additional device enrolled within Intune.

    additional device

Use Intune to add and assign a client app to company's workforce. One of an admin's priorities is to ensure that end users have access to the apps they need to do their work.

Prerequisites to be done on the Worry Free Business Security Services web console

  1. Download Security Agent MSI via downloader.
    1. Login to WFBS Services web console.
    2. Go to Security Agents.
    3. Under Manual Groups, click the group on where you require to add the client machine to.
    4. Click + Add Security Agents.
    5. Click Download Installer.

      Installer”

    6. A new tab will open. Click Download.

      Download

    7. Indicate where the MSI should be placed after download.
    8. Click Next, and wait for MSI to be downloaded.

      MSI

  2. Get Identifier.
    1. Under the same “+Add Security Agents” interface on step 1.e, click Instruction to service providers.

      Add Security Agents

    2. A URL will be shown, click Copy Identifier.

      Copy Identifier

Add the client app to Intune via Line-of-Business App

An app can be included so that Intune can manage aspects of the app. Use the following steps to add an app to Intune:

  1. In Intune, select Client apps > Apps > Add.
  2. Select Line-of-business app in the Other section of the App type dropdown box.

    LOB

  3. Select App package file to upload MSI.

    App package

  4. Click OK.
  5. Select App Information.
  6. In the Description box enter a description, such as “Worry free Business Security Service Agent”.
  7. In the Publisher box enter a publisher name, such as “TrendMicro”.
  8. [Important] In the Command-Line arguments box enter “Abandon=0 IDENTIFIER=[YOUR IDENTIFIER]”.

    Command-Line

  9. Use the default values for the remaining configuration values.
  10. Click OK.
  11. Click Add.

    Add

  12. Wait for MSI to be uploaded.

Assign the app to a group

After App is ready to deployed Intune, it can now be assigned to groups of users or devices. Use the following steps to assign an app to a group:

  1. In Intune, select Client apps > Apps.
  2. Select the app required to assign to a group.
  3. Click Assignments > Add group to display the Add group blade.
  4. Select Available for enrolled devices in the Assignment type dropdown box.
  5. Click Included Groups > Select groups to include> [Your group].

    Group

  6. Click Select > OK > OK > Save to assign the group.

    assign group

  7. [Important] On Windows 10 device, if User Account Control (UAC) is enabled, it will require you to click Yes to allow agent installer to make changes to let installation to push thru. UAC can be advised to be temporarily disabled to let agent be deployed properly and avoid prompt to show on user end.

    Allow

Install the app on the enrolled device

Install and use the Company Portal app to install the [Your group] app made available by Intune. Use the following steps to verify that the app is available to the user of the enrolled device.

  1. Log on to the enrolled Windows 10 Desktop device.
     
    The device must be enrolled with Intune. Also sign in to the device using an account contained in the group assigned to the app.
  2. In Intune, select Client apps > Apps.
  3. Select the app that required to be assigned to a group.

    Intune

  4. Check installation status.
Premium
Internal
Rating:
Category:
Deploy; Install
Solution Id:
1123693
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.