Education has suffered massively during the COVID 19 pandemic, and in turn resulted in our students learning from home for lengthy periods of time. Even though the students were not in school, we still have a duty of care to ensure they are safeguarded when using IT systems provided by school. Normally in school we use e-Safe Global to monitor for any potential safeguarding concerns.
I have been asked by e-Safe to share how i have installed their software remotely to our students via MS Intune/Endpoint Manager including the pre-requisite C++ Libraries.
Step 1 – Download Microsoft Win32 Content Prep Tool
In order to install the required files we will be using the Microsoft Win32 Content Prep Tool to package the installer files for deployment in Intune. To begin you should create 3 folders in an easy to access location, for me i have chosen C:\Intune but you can use whatever you like.
Within this folder you should create 3 folders, the names of these are up to you but for ease of use, I have named my folders
Download the tool from Github and extract to the ‘App‘ folder you created.
Step 2 – Downloading Prerequisites
In order for the e-Safe software to work, we first need to download the C++ redistributable files, you can get these from e-Safe or from Microsoft via this link
All of my clients are 64-Bit so i only needed the vc_redist.x64.exe, however if you have 32-bit clients you will need to repeat with vc_redist.x85.exe. Once downloaded, add the file to your ‘Source‘ folder.
Step 3 – Package the redistributable
You now need to run the IntuneWinAppUtil.exe file from your ‘App’ folder
Specify your source folder e.g C:\Intune\Source
Specify the setup file, which is vc_redist.x64.exe
Specify your output folder e.g C:\Intune\Output
When asked if you want to specify a catalog folder, choose No.
The app will package the file and create a new .intunewin file in your output folder.
Step 4: Create pre-requisite app in Intune/Endpoint Manager
Now we have created the win32 app, its time to upload it to Intune, log into your M365 Tenant and open Endpoint Manager. Head to Apps > Windows Apps > Add New.
Choose Windows App (Win 32) and select the intune.win file in the Output folder
Fill in the app information, you can change this to whatever suits you.
Under Program you want to add the following
Install Command: “VC_redist.x64.exe” /install /passive /norestart
Uninstall Command: “VC_redist.x64.exe” /uninstall
Install behaviour: System
Under ‘Requirements’ add 64-Bit and a minimum OS version (this is upto you)
Under ‘Detection rules’ you want to choose ‘Manually configure detection rules‘ and ‘Registry’
Value = Major
Detection method = Value Exists
Assign the app to your target device group and click create
Step 5 – Create E-safe client in intune/endpoint manager
Now we’ve added the pre-requisite, we need to add the e-Safe client using the same method. Contact e-safe support for your .MSI installer, they will provide you with this. Once you have it, add it to the ‘Source‘ folder you created earlier.
Package the file like you did in Step 3, but instead of specifying the VC_redist.x6.exe, use the MSI provided by e-Safe.
You’ll now have a new .intunewin file
Head back to Intune/Endpoint Manager and add a new app like in Step 4, upload the new intune.win file.
Leave the info-as is
Under program, leave the settings as is
Add requirements you need, ’64-Bit’
For detection rules you want to choose ‘Manually configure detection rules‘ > Add > MSI and leave settings as is
Under dependencies, you want to choose the C++ Redistributable we created earlier, and set to automatically install
Assign this app to your required device group, e.g. ‘Student Laptops’ and e-safe will now install to the devices you specified.