Skip to content

Commit b00d7b8

Browse files
committed
push mdm.xml with intune
1 parent 59daceb commit b00d7b8

File tree

2 files changed

+89
-19
lines changed
  • src/content/docs/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment

2 files changed

+89
-19
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/index.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@ IdentifyingNumber Name LocalPackage
5757
msiexec /x C:\WINDOWS\Installer\<WARP_RELEASE>.msi /quiet
5858
```
5959

60-
### Update the configuration
60+
### Update MDM parameters
6161

6262
The on-disk configuration of the Windows client can be changed at any time by modifying or replacing the contents of `C:\ProgramData\Cloudflare\mdm.xml`. The format of this file is as follows:
6363

src/content/docs/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/partners/intune.mdx

Lines changed: 88 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -10,30 +10,100 @@ This guide covers how to deploy the Cloudflare WARP client using Microsoft Intun
1010

1111
## Windows
1212

13-
### Prerequisites
14-
15-
[Download the `Cloudflare_WARP_<VERSION>.msi` installer](/cloudflare-one/connections/connect-devices/warp/download-warp/#windows).
16-
17-
### Configure Intune for Windows
18-
19-
1. Log in to your Microsoft Intune account.
20-
2. Go to **Apps** > **All Apps** > **Add**.
21-
3. In **App type**, select *Line-of-business app* from the drop-down menu. Select **Select**.
22-
4. Select **Select app package file** and upload the `Cloudflare_WARP_<VERSION>.msi` installer you downloaded previously.
23-
5. Select **OK**.
24-
6. In the **Name** field, we recommend entering the version number of the package being uploaded.
25-
7. In the **Publisher** field, we recommend entering `Cloudflare, Inc`.
26-
8. In the **Command-line arguments** field, enter a valid installation command. For example,
13+
### Deploy the WARP client
14+
15+
To deploy WARP on Windows using Intune:
16+
17+
1. [Download the `Cloudflare_WARP_<VERSION>.msi` installer](/cloudflare-one/connections/connect-devices/warp/download-warp/#windows).
18+
2. Log in to your Microsoft Intune account.
19+
3. Go to **Apps** > **All Apps** > **Add**.
20+
4. In **App type**, select *Line-of-business app* from the drop-down menu. Select **Select**.
21+
5. Select **Select app package file** and upload the `Cloudflare_WARP_<VERSION>.msi` installer you downloaded previously.
22+
6. Select **OK**.
23+
7. In the **Name** field, we recommend entering the version number of the package being uploaded.
24+
8. In the **Publisher** field, we recommend entering `Cloudflare, Inc`.
25+
9. In the **Command-line arguments** field, enter a valid installation command. For example,
2726
```txt
2827
/qn ORGANIZATION="your-team-name" SUPPORT_URL="http://support.example.com"
2928
```
30-
Refer to [deployment parameters](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/) for a description of each argument.
31-
9. Select **Next**.
32-
10. Add the users or groups who require Cloudflare WARP and select **Next**.
33-
11. Review your configuration and select **Create**.
29+
Refer to [deployment parameters](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/) for a description of each argument. You can change these parameters at any time by pushing a new [MDM file](#update-mdm-parameters).
30+
10. Select **Next**.
31+
11. Add the users or groups who require Cloudflare WARP and select **Next**.
32+
12. Review your configuration and select **Create**.
3433

3534
Intune is now configured to deploy the WARP client.
3635

36+
### Update MDM parameters
37+
38+
You can use Intune to update [MDM parameters](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/) for the WARP client. On Windows, these parameters are stored on the local device in `C:\ProgramData\Cloudflare\mdm.xml`.
39+
40+
To push a new `mdm.xml` file using Intune:
41+
42+
1. Log in to your Microsoft Intune account.
43+
2. Go to **Devices** > **Scripts and remediations**.
44+
3. Select the **Platform scripts** tab and select **Add**.
45+
4. Select **Windows 10 and later**.
46+
5. Enter a name for the script (for example, `Deploy Cloudflare mdm.xml`).
47+
6. In **PowerShell script**, upload the following `.ps1` file. Be sure to modify the XML content with your desired [parameters](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/).
48+
49+
```powershell title="mdm-template.ps1"
50+
# Define the path to the file
51+
$filePath = "C:\ProgramData\Cloudflare\mdm.xml"
52+
53+
# Create the XML content as a string
54+
$xmlContent = @"
55+
<dict>
56+
<key>multi_user</key>
57+
<true/>
58+
<key>pre_login</key>
59+
<dict>
60+
<key>organization</key>
61+
<string>mycompany</string>
62+
<key>auth_client_id</key>
63+
<string>88bf3b6d86161464f6509f7219099e57.access</string>
64+
<key>auth_client_secret</key>
65+
<string>bdd31cbc4dec990953e39163fbbb194c93313ca9f0a6e420346af9d326b1d2a5</string>
66+
</dict>
67+
<key>configs</key>
68+
<array>
69+
<dict>
70+
<key>organization</key>
71+
<string>mycompany</string>
72+
<key>display_name</key>
73+
<string>Production environment</string>
74+
</dict>
75+
<dict>
76+
<key>organization</key>
77+
<string>test-org</string>
78+
<key>display_name</key>
79+
<string>Test environment</string>
80+
</dict>
81+
</array>
82+
</dict>
83+
"@
84+
85+
# Ensure the directory exists
86+
$directory = Split-Path $filePath -parent
87+
if (-not (Test-Path $directory)) {
88+
New-Item -ItemType Directory -Path $directory | Out-Null
89+
}
90+
91+
# Write the XML content to the file
92+
try {
93+
$xmlContent | Out-File -Encoding UTF8 -FilePath $filePath
94+
Write-Host "mdm.xml file created successfully at: $filePath"
95+
}
96+
catch {
97+
Write-Error "Failed to create mdm.xml file: $_"
98+
}
99+
```
100+
7. In **Assignments**, select the Windows devices that should receive the new `mdm.xml` file.
101+
8. When you are ready to deploy the script, select **Add**.
102+
103+
Intune will now execute the Powershell script on the target devices. Once the new `mdm.xml` file is created, WARP will immediately start using the new configuration.
104+
105+
If you would prefer to use Intune's Win32 App tool to run the Powershell script, refer to the [Intune documentation](https://learn.microsoft.com/en-us/mem/intune/apps/apps-win32-app-management).
106+
37107
## macOS
38108

39109
Refer to the [generic instructions for macOS](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/#macos).

0 commit comments

Comments
 (0)