Deploy Client On Windows Using Intune with Win32 App

This article provides instructions to deploy Netskope Client on Windows devices (either joined to Active Directory or Microsoft Entra ID) using the Microsoft Intune Win32 app.

Prerequisites

• Import users into Netskope using Directory Importer or SCIM integration.

• Convert the MSI Netskope Client package file to .intunewin format. To learn more, view Prepare Win32 app content for upload.

• Ensure the device is enrolled in Microsoft Intune.

Deployment Procedure

To deploy Netskope Client With Win32 App, perform the following instructions:

1. Log in to the Azure Portal (portal.azure.com).

2. Click More Services.

3. From the left-pane, click Intune.

4. From the main pane, right-click the Intune option and open it in a new tab. This redirects you to endpoint.microsoft.com.

   

5. From Microsoft Endpoint Manager admin center, select Apps > All Apps.

6. Select + Add.

7. For App Type, select Windows app (Win32).

   

8. Click Select.

   This navigates to Add App.

9. Under App Information, perform the following:

   1. In Select file, click Select App Package file.

      1. This opens a separate window.

      2. In App package file upload the .intunewin file.

      3. Click OK.

   2. Name: Enter the name for the application. For example, Netskope Client Win32.

   3. Description: Enter the description of the application.

   4. Publisher: Enter the name of the publisher of the application.

   5. Show this as a featured app in the Company Portal: Toggle to enable this option. Use this option to display the application on the main page of your organization portal where users browse for apps.

      

10. Click Next.

11. Under Program, perform the following:

    • Install Command: Enter the MSIEXEC command in the following format:

      msiexec /I NSClient.msi token=<organization id> host=addon-<tenant-name>.goskope.com mode=peruserconfig enrollauthtoken=<your enrollauthtoken> enrollencryptiontoken=<your encryption token> autoupdate=on /qn

      For example, if you are using IDP, enter the following command:

      msiexec /I NSClient.msi installmode=IDP tenant=corp domain=eu.goskope.com /qn

      To learn more about other MSI command, view Netskope Client for Windows.

      – Use mode=peruserconfig only in multi-user environments.
      – Use autoupdate=on only if you want to update Netskope Client automatically.

    • Uninstall Command: Enter the MSIEXEC command in the following format:

      msiexec /I NSClient.msi <Product code> /qn

      To get the product code, run the following command in the command prompt:
      wmic product where "Name like '%Netskope%'" get Name,Version,IdentifyingNumber

    

12. Click Next.

13. Under Requirements, enter the following:

    1. Set the Operating system architecture to 64-bit.

    2. Set the Minimum operating system to Windows 10 1607.

       

14. Click Next.

15. Under Detection Rules, perform the following:

    1. Select Manually configure detection rules from the drop-down options in Rules format.

    2. Click +Add.

       This opens a separate window: Detection Rule.

       1. Select Rule Type as File.

       2. Set Path to:

          • For a 32-bit Netskope Client: C:\Program Files (x86)\Netskope\STAgent

          • For a 64-bit Netskope Client: C:\Program Files\Netskope\STAgent

       3. Add stAgentSvc.exe in File or Folder.

       4. Select Detection method as File or folder exists.

          

16. Click Next.

17. Under Dependency, click Next.

18. Under Supersedence, click Next.

19. Under Assignment, perform the following:

    1. Under Required, click Add group to add appropriate groups that need to be included.

       

    2. Click Next.

20. Under Review + Create, click Create to review and complete the process.

21. You can monitor the installation process from Intune. 

22. Go to Apps > Windows > Windows | Windows Apps > Search for Netskope > Device Install status.

To learn more, view Configure Win32 App in Intune.

Uninstall Netskope Client In Intune

To set up un-installion script for Netskope client in Windows devices follow the procedure as described in this section:

1. Select an existing Windows app in Apps > All Apps.

2. Go to Properties.

3. Ensure that you have added the uninstall command under Programs. If not added, click Edit in the Programs section and add  the command to remove Netskope Client from the end-user device.

   To add the Uninstall Command, enter the MSIEXEC command in the following format:

   msiexec /I NSClient.msi <Product code> /qn

   
   
   • To get the product code, run the following command in the command prompt:
     wmic product where "Name like '%Netskope%'" get Name,Version,IdentifyingNumber
   
   
   • If the Password protection for Client uninstallation option in Client Configuration is enabled, enter the following command in the powershell script.
     msiexec /x "{Product code}" /qn PASSWORD="[client_uninstall_password]"
     For more details, see Password protection for Client uninstallation.

4. Under the Assignments section, click Edit.

5. Under Uninstall, click Add group to add appropriate groups that need to be removed.

   

   Ensure that you do not add the same group added under the Required section.

6. Go to Devices > All Devices.

7. Select the specific device where you need to uninstall Netskope Client.

8. Click the Sync option.

   

   Go to the endpoint machine Accounts → Access work or school → select info under account name and click sync option. Wait till you receive the command from Intune.