Introduction

This document provides step-by-step instructions to deploy Windows Passwordless v2.0 on managed Windows devices using Microsoft Intune (MDM).

Prerequisites

You must have admin access to the Microsoft Intune Admin Center.
You must have the installation PowerShell script (.ps1).
You must have the detection rule PowerShell script (rule.ps1).
Note: Contact Oloid Support to obtain the PowerShell script (.ps1) and detection rule script (rule.ps1).
You must have downloaded the Microsoft Win32 Content Prep Tool (IntuneWinAppUtil).
You must download the AutoPairConfig.txt file from the Tenant Admin Portal. For more information, refer to Windows Login - How to generate Auto-Pair config file for Windows Login in Tenant Admin Portal.
You must download the Windows Login v2.0 installer file. For more information, refer to Windows Login v2.0 - How to download Windows Login v2.0 installer file from Tenant Admin Portal | Oloid Help Center

Steps to Deploy Windows Passwordless 2.0 using Microsoft Intune (MDM)

Create App Package
Create and Configure App
The Windows Passwordless v2.0 is deployed successfully to the target devices.

Steps to Create App Package

Place the Windows Login v2.0 installer file, AutoPairConfig.txt file, and installation PowerShell (.ps1) script in the same folder.
Note: If the AutoPair configuration file is added, the app is installed and paired automatically. If not, manual pairing is required after installation.
Download and open the Microsoft Win32 Content Prep Tool.
Enter the following details when prompted by the tool:
1. Source folder: Enter the folder path that contains the install.ps1 file, autopair config file and the installer file.
2. Setup file: Enter the installer file name with the file extension.
3. Output folder: Enter the folder path where the .intunewin file must be created.
  Note: Before you generate the .intunewin file, update the following values in the install.ps1 script:
  - Set $InstallerName to the name of the .exe installer file used to install the app.
  - In $SilentArgs, set the required feature flags to true or false based on the features you want to install.
  The app package is created successfully.
  Navigate to the output folder and verify that the .intunewin app package file has been created successfully.

Create and Configure App

Log in to Microsoft Intune Admin Account.
The Microsoft Intune home screen is displayed.
Navigate to Apps > Windows.

The Windows apps screen is displayed.
Click + Create.

The Select app type screen is displayed.
In the app type dropdown, select Windows app (Win32) and click Select.

The Add App screen is displayed.
On App Information tab, do the following:
1. Click Select app package file.
  
  The App package file screen is displayed.
2. Browse and select the .intunewin app package file.
  Note: Select the same .intunewin package file that was created in the Steps to Create Package File section.
3. Click OK.
  
  The App information tab is displayed.
4. Enter Publisher.
5. Click Next.
  
  The Program tab is displayed.
On the Program tab, do the following:
1. Ensure command line is selected as installer type.
2. Enter Install command.
  Note: Use the following command.
```
%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -File .\install.ps1
```
3. Ensure command line is selected as uninstaller type.
4. Enter Uninstaller command.
  Note: Use the following command.
```
%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -NoProfile -ExecutionPolicy Bypass -Command "Uninstall-Package -Name 'Oloid Passwordless Login' -Force"
```
5. Select No as Allow available uninstall (Optional).
  Note: Select No to prevent the application from being uninstalled through the Company Portal or Windows Control Panel.
6. Ensure System is selected as Install behaviour.
7. Click Next.
  
  The Requirements tab is displayed.
On the requirements tab, do the following.
1. Select No as Check operating system architecture.
2. Select Windows 10 1607 as Minimum operating system.
3. Click Next.
  
  The Detection Rules tab is displayed.
On the Detection Rules tab, do the following.
1. Select Use a custom detection script as Rules format.
2. Upload Script file.
  Note: To get the Script file, contact Oloid Support.
3. Ensure No is selected as Run script as 32-bit process on 64-bit clients.
4. Ensure No is selected as Enforce script signature check and run script silently.
5. Click Next.
  
  The Dependencies tab is displayed.
6. Click Next.
  
  The Supersedence tab is displayed.
7. Click Next.
  
  The Assignments tab is displayed.
On the Assignments tab, do the following.
1. On Required section, click Add group to assign this profile to your target device groups.
  
  The Select groups pop-up is displayed.
2. Do the following.
  1. Select the group(s) from the list.
    Note: You can select multiple groups (If required).
  2. Click Select.
  The Group is added in the list.
Click Next.

The Assignment tab is configured successfully and Review + create tab is displayed.
Note: To assign groups under the Available for enrolled devices and Uninstall sections, repeat Steps 9a and 9b as required.
Review all settings and click Create.

The app the created successfully and added in the apps screen.