In this article

Install the Windows Roaming Client with Microsoft Intune by adding the installer as a line-of-business (LOB) app.

Prerequisites

The following requirements apply before installing the Windows Roaming Client with Intune:

• A Site to associate with the Roaming Clients, with the appropriate Filtering Policy and Block Page assigned
• The Site Secret Key, from the Install Roaming Client drawer in the DNSFilter dashboard
• The 64-bit Windows Roaming Client MSI file, downloaded from the same Install Roaming Client drawer

Add the Roaming Client in Intune

Add the Windows Roaming Client by following the Microsoft instructions to add a Windows line-of-business app.

1. Add the MSI file as the App package file.
2. On the App information page, use these settings:
   • Name: DNSFilter agent 64bit
   • Description: DNS Filter Agent
   • Publisher: DNS Filter
   • App Install Context: Device
   • Ignore app version: Yes. This setting enables the Roaming Client to stay up to date through auto-update without errors from Intune reinstalling the MSI because the version does not match.

   • Command-line arguments: NKEY="SITESECRETKEY", with the Site Secret Key in place of SITESECRETKEY. This argument passes the Site Secret Key to the installer.

     Caution: Enter the NKEY argument with straight quotes, not smart (curly) quotes, and with no spaces. Smart quotes prevent the Windows Roaming Client from registering, and spaces can cause the Intune installation to fail.

   • Category: Computer Management
   • Show this as a featured app in the Company Portal: Yes

To test the argument before adding it to Intune, run the following command locally from PowerShell:

msiexec /i "C:\path\to\DNSFilter_Agent_Setup.msi" NKEY="SITESECRETKEY"

Intune accepts only one command-line argument for a line-of-business app, so use it for NKEY. If the installation needs more command-line options, such as TAGS or TRAYICON, add the Roaming Client as a Win32 app instead.

After adding the Roaming Client, assign the app to groups in Intune as needed.

Deploy with Windows Autopilot

If line-of-business apps and Win32 apps install together during Windows Autopilot enrollment, the app installations can fail. For Autopilot enrollment, add the Roaming Client as a Win32 app instead, or use Windows Autopilot device preparation, which supports both app types together.

Related content

• Install Windows Roaming Client
• Windows Roaming Client Silent/Remote tool Install