> ## Documentation Index
> Fetch the complete documentation index at: https://docs.idemeum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Intune

> Deploy idemeum desktop agent to a fleet of Windows or macOS workstations with Microsoft Intune.

## Instal Windows agent with Intune

* Navigate to your idemeum tenant and access admin portal
* Click `Install new agent`
* Copy the command for Windows and save it on your desktop as `ps1` file
* Access your Intune admin dashboard
* Navigate to `Devices` → `Windows` → `Scripts` → `Platform scripts` and then click `Add`
* Give script a name
* Upload the installation script file that you created
* Configure the settings as shown below

<img src="https://mintcdn.com/idemeum/eR4vAPXScYhGlhAQ/images/i1.png?fit=max&auto=format&n=eR4vAPXScYhGlhAQ&q=85&s=3ac3857169cb2b1a0375018be17e0579" alt="I1" width="1600" height="1084" data-path="images/i1.png" />

* For assignments add the workstations or groups to which you would like to deploy idemeum client

<img src="https://mintcdn.com/idemeum/eR4vAPXScYhGlhAQ/images/i2.png?fit=max&auto=format&n=eR4vAPXScYhGlhAQ&q=85&s=e7967a051a4e364bd40646524210a727" alt="I2" width="1600" height="1084" data-path="images/i2.png" />

* Save the script configuration

Once complete you can manually trigger the deployment by navigating to `Devices`, choosing the workstation, and then triggering manual sync by clicking on `Sync` button. Or you can wait until the Intune agent will pick up the configuration and perform an installation within an hour.

## Instal macOS agent with Intune

### Obtain macOS profile and install script

* Navigate to your idemeum tenant and access admin portal
* Click `Install new agent`
* Copy the command for macOS and save it as `.sh` file
* Also download the macOS deployment MDM profile

<Tip>
  For macOS pelase also download the MDM deployment profile. This profile will be used to silently enable all required permission on macOS workstations.
</Tip>

### Deploy macOS idmeum profile

* In Intune admin dashboard navigate to `Devices` → `macOS` → `Configuration`
* Click `Create` → `New policy`
* Select `Templates` for `Profile type`
* Then choose `Custom`

<img src="https://mintcdn.com/idemeum/O8queGH5fi9w640p/images/b1.png?fit=max&auto=format&n=O8queGH5fi9w640p&q=85&s=89e8957caae686ac7f4a885b720405a1" alt="B1" width="1600" height="1363" data-path="images/b1.png" />

* Give profile a name
* Provide the name that will be displayed to users
* Choose `Device channel` and upload the profile that you downloaded in the steps above

<img src="https://mintcdn.com/idemeum/WHMkBSivHnUxQPcC/images/b2.png?fit=max&auto=format&n=WHMkBSivHnUxQPcC&q=85&s=092ef68422289a12a87573f9c14e2841" alt="B2" width="1600" height="1363" data-path="images/b2.png" />

* Choose the groups of devices or users that you want to deploy this profile to
* Deploy the profile to target macOS workstations

### Deploy macOS idemeum agent

* In Intune navigate to `Devices` → `MacOS` → `Scripts`
* Create a new script and give it a name
* Upload the script that you created before
* For the `Run script as signed-in user` choose `No` to make sure script runs as `root`

<img src="https://mintcdn.com/idemeum/iHj4J4GVh3SZ6GDy/images/k1.png?fit=max&auto=format&n=iHj4J4GVh3SZ6GDy&q=85&s=ecad628a2ecff0c2fb27100465e74f31" alt="K1" width="1600" height="1231" data-path="images/k1.png" />

* Click next and choose the devices where you need to install idemeum
* Review the configuration and save the script
* Now idemeum client will be installed to a list of target devices