I am mentioning this misunderstanding because I still remember a question about it and the official MSFT reply on the Microsoft Q&A pages I guess I need to explain the installation and the user detection part a bit better because I noticed that there was some misunderstanding about the user-based detection rule.
UNINSTALL APPLOCKER WINDOWS INSTALL
Please Note: It’s obvious as we are using a cmd script to launch that EXE file to silent install the ClickOnce application we need to allow the command prompt within the Applocker policy 5. I opened Intune and selected the proper Applocker rule to add an additional Applocker publisher rule as shown below.
application file that was downloaded, we renamed it to XML so I could get some more informationĪs shown above, when we opened the XML we could fetch the required publisher information by searching for : publisheridentity This will make sure the application file will be downloaded instead of executedĪfter we downloaded the. To get the publisher information, I opened Google Chrome (yep Chrome not, Edge) and put in the URL. ApplockerĪs stated in the previous part of this blog, when having Applocker deployed we need to make sure this ClickOnce application is allowed to be executed. Otherwise, you will end up with your ClickOnce app being blocked 4. Please note: before publishing the app to Intune, please make sure you check out your AppLocker configuration. Please note: I am using the %username% as that one will resolve to the proper username! Using other variables such as %localappdata% isn’t going to work with detection rules! We also made sure we configured the file detection rule to detect if the shortcut has been placed in the user his/her start menu Even when we have configured the Java app as a required app we still need to be sure Java is installed otherwise the Xelion app isn’t going to workĪs always we also need to define some detection rules… because we need to make sure the app will be detected in the user its Roaming AppData StartMenu Folder, after the app has been successfully installed. Without Java, the Xelion app isn’t going to work. Of course, we only want to have this app installed if a specific requirement has been met. We configured the install behavior as USER because the ClickOnce needs to be installed in the appdata\local\apps\2.0 folder and not in the SYSTEM its local AppData folder: C:\Windows\System32\config\systemprofile\AppData\Local When deploying the Win32App to Intune we made sure we configured the Install behavior as User Let’s move on and convert the script and the executable to an Intunewin file and upload it to Intune. This nice executable gives us the power to fetch the ClickOnce application file online and install it! Of course, with some additional logging included. Throwing some prompts to the user to accept stuff or to click on install isn’t always nice so we decided to silently install the app with the use of the SilentClickOnce.exe file
Having the user click on accept isn’t what we want! When publishing this app as an available app, we would be okay with it but if we want to deploy this ClickOnce app as a required one it’s going to be hard for the user to approve the installation 3. It did its job, but unfortunately, we were prompted with some additional questions you would expect to get when launching a ClickOnce application file Rundll32.exe dfshim.dll,ShOpenVerbApplication When we first wanted to push the ClickOnce Win32app we first used a rundll32 command to initialize the ClickOnce installation Let’s move on to our first installation attempt, shall we? 2. The other challenges we needed to deal with were how we were going to configure and allow the ClickOnce app when using Applocker and how we would configure the detection rule. One of those challenges would be to make sure we are deploying the app but without some additional prompts like these. When we want to deploy ClickOnce apps to our users we have some challenges we need to overcome. Of course, it is!ĭeploying apps is not my main focus but I guess everything happens for a reason.
UNINSTALL APPLOCKER WINDOWS HOW TO
I will show you how to deal with the silent install, Uninstall, Applocker, and dealing with user-based detection rules. This blog will be no deep dive into a weird issue but more like an explanation of when you want to silently install and uninstall a Win32app in the user context.
0 kommentar(er)
