Liquit Workspace Deployment using Microsoft Intune & Autopilot

Instead of manually converting multiple apps that you need into .intunewin files and then upload and configure them individually in Microsoft Intune, you can just add the Liquit Agent Bootstrapper to Microsoft Intune and then deploy multiple apps at once.
Currently, there is no possibility to enrol a machine running the Liquit Agent with Microsoft Intune, because the Liquit Workspace configuration file cannot be added, there are only two ways to integrate Liquit with Microsoft Intune: either by adding the Liquit Agent Bootstrapper within Microsoft Intune, or creating a Bootstrapper script.
The following step-by-step instructions will help you deploy the bootstrapper within Microsoft Intune.

Liquit Workspace configurations

Create a self-signed certificate

1. In Liquit Workspace, navigate to Manage > System > Device Registrations.
2. Click on Create in the table toolbar.
3. In the Create device registration dialog box that opens, configure the following:
   • In Type, select Certificate* and click Next.
   • In Overview, write a name, for example Device enrollment and click Next.
   • In Settings, check the Use a self signed certificate for the device registration option. This will create a self-signed certificate for you. Click Next.
   • In Self signed, write a common name and change the days valid and key size if needed. Click Next.
   • In Summary, uncheck the Modify device registration after creation option. Click Finish.

Create a device collection

1. In Liquit Workspace, navigate to Manage > Identities > Device Collections.
2. Click on Create in the table toolbar.
3. In the Create device collection dialog box that opens, configure the following:
   • In Type, select Dynamic* and click Next.
   • In Overview, write a name, for example MS Intune Devices and click Next.
   • In Summary, leave the Modify device registration after creation option checked. Click Finish.
4. In the detailed view of the new device collection, configure the following:
   • In Conditions, click Create filter set in the screen top menu. Then click Create filter.
   • In the Create filter dialog box that opens, configure the following:
     • In Type, select Device name.
     • In Value, insert the prefix your organization uses within Microsoft Intune.
     • Click Confirm.
   • Leave the operator set to AND. Create a new filter in the new filter set, with the following parameters:
     • In Type, select System manufacturer.
     • In Value, insert the system manufacturer your organization uses.
     • Click Confirm.
   • Create a new filter in the new filter set, with the following parameters:
     • In Type, select System model.
     • In Value, insert the system model your organization uses.
     • Click Confirm.
   • Click Save in the top menu of the Conditions screen.

Create a deployment

1. In Liquit Workspace, navigate to Manage > Automation > Deployments.
2. Click on Create in the table toolbar.
3. In the Create deployment dialog box that opens, configure the following:
   • In Name, write MS Intune Deployment. Click Next and then Finish.
4. In the detailed view of the new deployment, configure the following:
   • In Packages, click on the browse button and select the packages you want to deploy.
   • In Assignments, click on the browse button and select the MS Intune Devices device collection you previously created. Click Confirm.

Configure the Agent required for Microsoft Intune

1. Open Windows File Explorer and navigate to Local Disk (C:).
2. Open the Temp folder. If it's not there, create one. You will use this folder to store all the required files.
3. Create a new folder named Liquit.
   • Inside it, create a JSON file named Agent.json.
4. Open the JSON file and create your own settings based on the information we provide in Agent Configuration.
5. See Agent Configuration for the Liquit Workspace Agent or Agent Configuration for Liquit Universal Agent for more information on creating an Agent configuration file.

It is important to have the following settings configured:

• The device must be configured to register itself with credentials or certificate, depending on the type of the Agent.
• Context set to Device.
• Deployment.Autostart.Enabled set to true.
• Deployment.Enabled set to true.
• Deployment.Start set to false. The deployment start must be false because the bootstrapper and the installer will automatically trigger the deployment.

Agent.XML example

<Register>
    <Type>1</Type>
    <Username><![CDATA[LOCAL\wksimport]]></Username>
    <Password><![CDATA[P@ssw0rd]]></Password>
</Register>
<Deployment>
    <Enabled>True</Enabled>
    <Start>False</Start>
    <Cancel>False</Cancel>
    <Events>False</Events>
    <Context>Device</Context>
    <AutoStart>
        <Enabled>True</Enabled>
        <Timer>0</Timer>
        <Deployment>LIQUIT</Deployment>
    </AutoStart>
</Deployment>

Agent.JSON example

{
    "zone":"https://example.liquit.com",
    "registration": {
        "type": "Certificate"
    },
    "log": {
        "level": "Debug"
    },
    "deployment": {
        "enabled": true,
        "start": false,
        "context": "device",
        "cancel": true,
        "triggers": false,
        "autoStart": {
            "enabled": true,
            "deployment": "LIQUIT",
            "timer": 0
        }
    }
}

Microsoft Intune configurations

Download all the files required for Microsoft Intune

1. Navigate to Manage > Device Registration and open the device registration you created earlier. In the detailed view of the registration navigate to Settings. Click on Download for agent registration. You will need this certificate later to create an intunewin file for Microsoft Intune.
2. Download the latest version of the bootstrapper and the latest version of IntuneWinAppUtil. Copy them in the Local Disk (C:)\Temp\Liquit folder you created previously.

Prepare the .intunewin file for Microsoft Intune

1. Start IntuneWinAppUtil.exe as Administrator
2. Inside the tool, navigate to Local Disk (C:)\Temp\Liquit. Press the Enter key on your keyboard.
3. Then specify the AgentBootstrapper file. Press the Enter key on your keyboard.
4. Then specify a name for the output folder. For example C:\Temp\Output. Press the Enter key on your keyboard.
5. When prompted for the catalog folder, press the N key on your keyboard and then press the Enter key on your keyboard.
   
6. After the bootstrapper has run, navigate to the output folder to find the .intunewin file.
   

Upload the .intunewin file to Microsoft Intune

1. Go to Microsoft Intune admin center.
2. Select Apps > By platform > Windows > + Add.
3. On the Select app type pane, under the Other app types, select Windows app (Win32) and then click Select.
   
4. On the App information page, add the necessary details like a proper name and description, publisher, app version, information URL and logo image. Click Next.
5. On the Program page, configure the following:
   • the install command (see Installation of Liquit Agent Bootstrapper). For example:
     AgentBootstrapper-2.1.0.2.exe /startDeployment /waitForDeployment /logPath=C:Windows\Temp
     If you’re using a certificate to register, specify the name and path.
     If you want to deploy a Liquit Workspace Agent and not the Liquit Universal Agent, specify the /legacyDownloadparameter. This is for the 3.10 agent or pre-4.0 servers.
   • the uninstall command, for example AgentBootstrapper-2.1.0.2.exe /uninstall
   • Click Next.
6. On the Requirements page, Select the 32 and 64 bit operating system architectures and the minimum operating system. Click Next.
7. On the Detection rules page, add your custom detection script for the Agent. For example:

# Define an array of file paths to check
$filePaths = @(
    "C:\Program Files\Liquit Universal Agent\Agent.exe",
    "C:\Program Files (x86)\Liquit Universal Agent\Agent.exe",
    "C:\Program Files (x86)\Liquit Workspace\Agent\Agent.exe"
)

# Loop through each file path and check if it exists
foreach ($path in $filePaths) {
    if (Test-Path $path) {
        Write-Host ("Liquit Workspace is installed at " + $Path)
        Exit 0
    } 
}
Write-Host ("Liquit Workspace is not installed!")
Exit 1

If you signed the script, you can enable the option Enforce script signature check and run script silently to run the script silently.

8. On the Dependencies and Supersedence pages click Next.
9. On the Assignments page, assign it to devices, users or groups as needed. Click Next.
10. On Review + create page, review the values and settings that you entered for the app. Click Create to add the bootstrapper to Microsoft Intune.

Autopilot Enrollment Status Page

During the Device setup stage in the Autopilot ESP the Liquit Agent will be installed, registered and then the deployment will start automatically,

On our YouTube channel, you can find a video of the entire walkthrough.