Deploy Client On Windows Using Intune

Deploy Client On Windows Using Intune

This article provides instructions to deploy Netskope Client on Windows devices (either joined to Active Directory or Microsoft Entra ID) using the Microsoft Intune.


To learn more about supported OS and platform, see the Netskope Client Supported OS and Platform section.

The following steps are for deploying Netskope Client on WIndows devices.

Prerequisites: On-board or add users into Netskope using Directory Importer or SCIM integration.

  1. Ensure the device is enrolled in Microsoft Intune.

  2. Log in to the Azure Portal (

  3. Click More Services.

  4. From the left-pane, click Intune.

  5. From the main pane, right-click the Intune option and open it in a new tab. This redirects you to


  6. From Microsoft Endpoint Manager admin center, select Apps > All Apps.

  7. Select + Add.

  8. For App Type, select Line-of-business app.

  9. Upload the NSClient.msi to App Package File and select OK.

  10. Under App Information:

    • Provide a description.

    • Publisher Name.

    • Set Ignore App Version to Yes if you intend to allow the Netskope client to auto-update.

    • Select the appropriate category.

    • Select No under Display this as a featured app in the Company Portal.

    • Information and Privacy URL are optional values.

    • Under Command-Line Arguments: token=<organization id> host=addon-<tenant-name> mode=peruserconfig (Use peruserconfig only for multi-user environments) autoupdate=on (only applicable if you want the client to auto-update) /qn

      If Secure Enrollment feature is enabled, each deployment mode consists of two additional parameters (Authentication and Encryption token):
      • enrollauthtoken: Specifies the authentication token.​​​
      • enrollencryptiontoken:​​ Specifies the encryption token.
  11. Click Next.

  12. It navigates to the Assignments tab.

    1. Under Required category, click Add group to add appropriate groups that need to be included.

    2. Click Next.

  13. It navigates to Review + Create. Click Create to review and complete the process.

  14. You can monitor the installation process from Intune. Go to Apps > Windows > Windows | Windows Apps >Search for “Netskope” > Device Install status.

Uninstalling Clients

To set up un-installion script for Netskope client in Windows devices follow the procedure as described in this section:


This procedure is applicable only for devices that are AD joined. Also, during subsequent installation, un-assign this app to avoid un-installation of the newly installed Clients.

  1. Login to your Intune admin console and select Devices > Scripts and remediations.

  2. Click Platform Scripts.

  3. To start adding the uninstallation script, click +Add and select Windows 10 and later.


  4. Under Add Powershell script, enter a Name for the script configuration and click Next to continue.


  5. Under script settings , from the Script location drop-down, select the powershell script from your computer. Enter the following command in the powershell script.

    $product_identifier= Get-WmiObject -Class Win32_Product | where Name -eq "Netskope Client" | select -expandproperty IdentifyingNumber msiexec /uninstall $product_identifier /l*v C:\Users\Public\nsclient_uninstall.log /qn

    Set the following options for the script:

    • Run this script using the logged on credentials – YES

    • Enforce script signature check – NO

    • Run script in 64 bit PowerShell Host – YES

    Modify the path for the log to be written to and failure to modify, results in the script failure. The logged in user must have the permission to run this script and write to the specified directory or change Run this script using the logged on credentials to NO to run this from the system context. If running from system context, the system user must have the permission to write to the specified directory.


  6. Click Next to continue.

  7. Under Assignments, assign the user groups for this script. This uninstalls Netskope Client in all devices of the assigned user group.

  8. Under Review + add, review your selections and click Add to complete the procedure.


Share this Doc

Deploy Client On Windows Using Intune

Or copy link

In this topic ...