Skip to main content

Netskope Help

Deploy Client On Windows Using Intune

This article provides instructions to deploy Netskope Client on Windows devices (either joined to Active Directory or Azure AD) using the Microsoft Intune.


To learn more about supported OS and platform, see the Netskope Client Supported OS and Platform section.

The following steps are for deploying Netskope Client on WIndows devices.

Prerequisites: On-board or add users into Netskope using Directory Importer or SCIM integration.

  1. Ensure the device is enrolled in Microsoft Intune.

  2. Log in to the Azure Portal (

  3. Click More Services.

  4. Click Intune. Once you click Intune, it will redirect you to

  5. From Microsoft Endpoint Manager admin center, select Apps > All Apps.

  6. Select + Add.

  7. For App Type, select “Line-of-business app”.

  8. Upload the NSClient.msi to App Package File and select OK.

  9. Under App Information:

    1. Provide a description.

    2. Publisher Name.

    3. Set Ignore App Version to Yes if you intend to allow the Netskope client to auto-update.

    4. Select the appropriate category.

    5. Select No under Display this as a featured app in the Company Portal.

    6. Information and Privacy URL are optional values.

    7. Under Command-Line Arguments: token=<organization id> host=addon-<tenant-name> mode=peruserconfig (Use peruserconfig only for multi-user environments) autoupdate=on (only applicable if you want the client to auto-update) /qn

    8. Select OK.

    9. Select the appropriate Scope Tag.

    10. Select Add.

  10. Wait for the app to upload and finalize

    1. Select the Netskope Client from the app list.

    2. Select Assignments > Add Group.

    3. For Assignment Type, select Required.

    4. Select the appropriate groups that should be included or excluded.

    5. Select Save.

  11. You can monitor the installation process from Intune. Go to Apps > Windows > Windows | Windows Apps >Search for “Netskope” > Device Install status.

Uninstalling Clients

To set up un-installion script for Netskope client in Windows devices follow the procedure as described in this section:


This procedure is applicable only for devices that are AD joined. Also, during subsequent installation, un-assign this app to avoid un-installation of the newly installed Clients.

  1. Login to your Intune admin console and select Device Configuration.

  2. In the Device Configuration page, click Scripts option in the left hand side.

  3. To start adding uninstallation script, click the Add button and select Windows 10.

  4. In the Add Powershell Script page, enter a Name for the script configuration and click Next to continue.

  5. In the script settings page, select the powershell script from your computer. Enter the following command in the powershell script.

    $product_identifier= Get-WmiObject -Class Win32_Product | where Name -eq "Netskope Client" | select -expandproperty IdentifyingNumber
    msiexec /uninstall $product_identifier  /qn /l*v <path-to>\nscuninstall.log

    Set the following options for the script:

    • Run this script using the logged on credentials - YES

    • Enforce script signature check - NO

    • Run script in 64 bit PowerShell Host - YES


    Modify the path for the log to be written to and failure to modify, results in the script failure. The logged in user must have the permission to run this script and write to the specified directory or change Run this script using the logged on credentials to NO to run this from the system context. If running from system context, the system user must have the permission to write to the specified directory.


    Click Next to continue.

  6. In the Assignment step, assign the user groups for this script. Netskope Client in all devices of the assigned user group will be uninstalled.

  7. In the last step, review your selections and click Add to complete the procedure.