Incydr - Deploying Incydr Agent and Browser Extension via Microsoft Intune

This article contains information on deploying the Incydr agent and browser extension via Microsoft Intune, including connecting Intune, configuring deployment policies, creating install packages, and assigning them to device groups.

Deployment Setup and Configuration

1. Log in to Incydr.
2. Navigate to Dashboard | Labs and scroll down to Deploy Incydr via Microsoft Intune.
3. Connect to Microsoft Intune:

• Click on Connect to Microsoft Intune.
• A new window will open, prompting you to sign in to your Microsoft Intune account as an administrator.
• Once signed in, the system will redirect you back to the Incydr console.

4. Navigate to Deployment Policies:

• From the Incydr Console, navigate to Administration | Deployment.
• Edit the default deployment policy or create a new one.

5. Configure Deployment Policy:

• Ensure the policy is applied to the correct organization.
• Add the domains you own to the Domains Allowed section.

6. Select the Operating System and Script Type:

• Choose the appropriate operating system in your deployment script.
• Select the correct script type based on your environment.
• Refer to the following documentation to determine the suitable script for your needs Deployment script and command reference for the insider risk agent.

7. Save the Script and return to the Dashboard:

• Once you have created and saved the script, navigate back to Dashboard | Labs and scroll down to Deploy Incydr via Microsoft Intune.

8. Add a New Install Package:

• Click on Add New Install Package.

Ensure the deployment secret is not nearing its expiration date.

9. Push the Package:

• Verify that all details are correct and click on Push Package.

10. Finalize the Package:

• Once the package is created, click on OK | Assign in Intune.

11. Assign the Package in Intune:

• Clicking Assign in Intune will redirect you to the Edit Application within Intune, where the deployment package was created.

There are a few settings that need to be adjusted within the Package created within Intune itself:

1. Assignment:

• Click on Add Group, and select the desired group that you want this package to be deployed to.

2. Once the group is created, you can click on the Included button and ensure the End User Notifications setting is configured as Hide All Toast Notifications.

3. Go back to the Properties of the application and edit the Program properties:

4. Minimum number of logical processors and Minimum CPU speed required should be left blank.

5. Once this is configured, you should be ready to save for deployment.