Deploy ManageEngine Endpoint Central Agent using Intune

Endpoint Central is an endpoint management and security solution for managing desktops, laptops, servers, and mobile devices from a central location. You can install patches, deploy software and operating system images, manage assets, software licenses, etc.

Endpoint Central agent is a lightweight software application that is required to manage devices using endpoint Central. In this blog post, we will see how to deploy the agent using Intune. But before that, we will test the agent installation on one test PC manually to check the Installation process.

STEP 1 – Download ManageEngine Endpoint Central Agent

Using the Endpoint Central management server you can download the agent. You can follow below steps to download the agent:

  • Go to Agent > Computers > Download Agent.
  • Remote Office: Select the Office location.
  • Platform: Select the platform as Windows and click on Download Agent.
Download ManageEngine Endpoint central agent
Download ManageEngine Endpoint central agent

After you click on Download Agent and select the office, it will download ManageEngine Endpoint agent. As I have a default location set as Local office, It downloaded a file called LocalOffice_Agent.exe. This is the agent file that we will be deploying using Intune.

If you’ve deployed the agent on the end user’s devices already and find the requirement to uninstall the Endpoint central agent, you can achieve this using Intune. This blog post will guide you through the process of uninstalling the Endpoint central agent with the help of Intune.

STEP 2 – Deploy Endpoint Central Agent using Intune

Before creating a deployment package in the Intune admin center, you’ll require the installer or setup files for the agent. We will use “LocalOffice_Agent.exe” file downloaded to create the deployment.

Follow below steps to create deployment on Intune admin center.

1. Create .IntuneWin file for deployment

  • For Uninstallation of this agent, I will be using a powershell script. Copy and paste below code into a notepad and save the file as Uninstall.ps1.

Uninstall.ps1

$agent = Get-WmiObject -Class Win32_Product -Filter "Name = 'ManageEngine UEMS - Agent'"
$agent.uninstall() | out-null
  • Copy LocalOffice_Agent.exe and Uninstall.ps1 files in one folder. For example: D:\MEEndpointAgent
Copy Installation Files for Endpoint Central Agent in a single folder
Copy Installation Files for Endpoint Central Agent in a single folder

Use below process to repackage the application/setup files to .intunewin file. Launch the command prompt, change the current folder to where Microsoft Win32 Content Prep Tool is downloaded, and run .\IntuneWinAppUtil.exe.

  • Provide source folder as the location of the folder where all setup files are copied. I have copied LocalOffice_Agent.exe and Uninstall.ps1 file in D:\MEEndpointAgent. Therefore, the source folder will be D:\MEEndpointAgent
  • Provide setup file name as LocalOffice_Agent.exe.
  • Output folder – This is the folder where .intunewin file will be created.
Execute IntuneWinAppUtil.exe file to create .intunewin package
Execute IntuneWinAppUtil.exe file to create .intunewin package
  • LocalOffice_Agent.intunewin file has been created successfully.
LocalOffice_Agent.intunewin file created
LocalOffice_Agent.intunewin file created

2. Create an App deployment on Intune admin center

  • Login on Microsoft Intune admin center.
  • Click on Apps -> All Apps -> + Add
  • Select App Type to Windows app (Win32)
  • Click on Select.
  • Select app package file and browse to LocalOffice_Agent.intunewin and click Ok.

App Information

On App Information tab, provide information about the application for example: Name, Description and Publisher Information. Other information like App version, Category, Information URL, Privacy URL is optional.

  • Name: ManageEngine Endpoint Central Agent
  • Description: ManageEngine Endpoint Central Agent deployment using Intune.
  • Publisher: ManageEngine
App Information tab (Win32 app deployment Intune)
App Information tab (Win32 app deployment Intune)

Program

You’ll need to specify the install and uninstall commands that will be executed to either install or uninstall the application.

  • Install Command: .\LocalOffice_Agent.exe /silent
  • Uninstall Command: powershell.exe -Executionpolicy Bypass -File .\Uninstall.ps1
  • Allow available uninstall: Select ‘Yes‘ to provide the uninstall option for this app for users from the Company Portal.
  • Install behavior: System
  • Device restart behavior: No specific action
Program tab (Win32 app deployment Intune)
Program tab (Win32 app deployment Intune)

Requirements

You can specify the requirements that devices must meet in order to deploy the app. If your devices are a mix of 32-bit and 64-bit types, then check both the boxes for 32-bit and 64-bit in the Operating system architecture drop-down. Else, just go with 64-bit.

  • Operating System Architecture – 64-bit
  • Minimum Operation System – Windows 10 1607

Detection Rules

Select Manually configure detection rules and click on +Add to add a detection rule.

  • Click on + Add, and Select Rule type File.
  • Path – C:\Program Files (x86)\ManageEngine\UEMS_Agent\
  • File or folder: scripts
  • Associate with a 32-bit app on 64-bit clients: Yes
Detection Rules ManageEngine Endpoint central agent deployment
Detection Rules ManageEngine Endpoint central agent deployment

Assignments

Click on Add group to add an Azure AD group containing users or devices. You can also click on Add all users or Add all devices.

STEP 3 – Monitoring the Deployment Progress

You can follow below steps to monitor the installation:

From the Microsoft Intune admin center >Apps > All apps. Click on the deployment and check the Overview page which will show the deployment status.

Monitor ManageEngine Endpoint Central agent deployment on Intune portal

Sync Intune Policies

The device check-in process might not begin immediately. If you’re testing this policy on a test device, you can manually kickstart Intune sync either from the device itself or remotely through the Intune admin center.

Alternatively, you can use PowerShell to force the Intune sync on Windows devices. Another way to trigger the Intune device check-in process is by restarting the device.

End-user Experience

Let’s check if the agent is installed on the target device. To confirm the agent installation, You can open Programs and Features and check if ManageEngine UEMS – Agent is showing in the list.

ManageEngine UEMS - Agent deployment successful via Intune
ManageEngine UEMS – Agent deployment successful via Intune

How to Uninstall Endpoint central agent using Intune?

We created .intunewin package using LocalOffice_Agent.exe and an Uninstall.ps1 PowerShell script file. Also when creating app deployment we specified the Uninstall command as powershell.exe -Executionpolicy Bypass -File .\Uninstall.ps1

The “LocalOffice_Agent.exe” file is utilized for deploying the ManageEngine UEMS – Agent, while “Uninstall.ps1” is used for uninstalling this agent. To add an Azure AD security group for the Uninstall assignment section of the app, which includes devices from which you want to remove the agent, follow these steps:

  • From Intune admin center, Click on Apps on the left-hand side.
  • Click on All apps.
  • Search for the app ManageEngine Endpoint Central Agent and click on it.
  • Click on Properties > Edit Assignments.
  • Under Uninstall assignments section, click on Add group to add an Azure AD group.
Uninstall Endpoint central agent using Intune
Uninstall Endpoint central agent using Intune

Deploy Old version of ManageEngine Desktop Central agent using Intune

If you are using an older version of ManageEngine Desktop Central agent and want to deploy it on users devices using Intune. Then you can follow below steps.

Download ManageEngine Desktop central agent

Download Agent from Desktop Central > Agent > Computers > Download Agent. You can test the installation of this agent on one test PC manually by using below steps:

Extract the zip file, Double click on setup.bat and Select Option 2 to Install WAN Agent on this Computer (As also shown in below screenshot). Ignore the Install.bat file for now as this file was created by me which will look into later when we are going to create Intune Package.

ManageEngine Desktop Central Setup.bat
setup.bat file for ManageEngine Desktop Central agent

Deploy ManageEngine Desktop Central Agent using Intune

Please find below the steps to deploy ManageEngine desktop central agent using Intune:

  • Download Agent from Desktop Central > Agent > Computers > Download Agent
  • Select the respective office to download the agent setup.
  • Extract the zip file.

Create a File Install.bat in the same folder where all other installation files are stored (as shown in the screenshot above).

Install.bat

msiexec /i DesktopCentralAgent.msi /qn REBOOT="REALLYSUPPRESS" MSIRESTARTMANAGERCONTROL="Disable" TRANSFORMS=DesktopCentralAgent.mst ENABLESILENT=yes

Use below process to repackage the application/setup files to .intunewin file. Launch the command prompt, change the current folder to where Microsoft Win32 Content Prep Tool is downloaded, and run below command.

Replace setup_folder with C:\DesktopCentral_Agent (this is where all your setup files are kept)

setup_file with Install.bat

Output_folder with C:\output (this is the folder where .intunewin file will be generated)

IntuneWinAppUtil.exe -c <setup_folder> -s <setup_file> -o <output_folder>
IntuneWinAppUtil Available command line parameters

Example:

.\IntuneWinAppUtil.exe -c C:\DesktopCentral_Agent -s Install.bat -o C:\output
IntuneWinAppUtil.exe command example

Output Folder:

Intunewin file screenshot

Now once .intunewin file has been created, we can create a Win32 app deployment on Intune admin center using below steps:

  • Login on Microsoft Intune admin center.
  • Click on Apps -> All Apps -> + Add
  • Select App Type to Windows app (Win32)
  • Click on Select.
  • Select app package file and browse to install .intunewin and click OK.
  • Enter / Update the Name of the Application and Publisher Information and click Next.
Add App on Microsoft Endpoint Manager Admin Center.

Program

  • Install Command Install.bat
  • Uninstall Command – %SystemRoot%\system32\msiexec.exe /x{6AD2231F-FF48-4D59-AC26-405AFAE23DB7} MSIRESTARTMANAGERCONTROL=Disable REBOOT=”ReallySuppress” /qn
  • Device restart behaviour – No Specific Action
  • Click Next.
Program Tab

Requirements

  • Operating System Architecture – 64-bit
  • Minimum Operation System – Windows 10 1607
Requirements Tab

Detection Rules

  • Rules format – Manually configure detection rules
  • Click on + Add, and Select Rule type MSI.
  • MSI Product Code – {6AD2231F-FF48-4D59-AC26-405AFAE23DB7}
  • MSI product version check – No
Detection Rules Tab

Assignments

Assign the application to your pilot users or all the users as per your requirement.

Assignments Tab

After you click on Create, it will upload the files and then push the agent to the users which are in your Pilot Group.

Monitor the Installation

You can check the status of the installation from Application -> Monitor Device Install Status or User Install Status.

Monitor the Installation
App Overview

There are other ways to Uninstall Endpoint central agent If you are ManageEngine endpoint central server administrator, then you can log in on the admin portal and go to Agent > Computers > Select the computer and then select Uninstall Agent.

Conclusion

In this blog post, we have seen how to deploy ManageEngine Endpoint Central Agent using Intune. Previously the agent name was Desktop Central agent and the setup files were in a different format. I have provided the steps for both the old version and new version agent Installers. I hope this post will help you deploy the agent in your organization across all devices.

1 thought on “Deploy ManageEngine Endpoint Central Agent using Intune”

  1. Great guide, however, I’m not clear on the uninstall.ps1 file. Does it get packaged with the LocalOffice_Agent.exe file when running the content prep tool?

    Reply

Leave a Comment