How to Create Configuration Profiles
Sign in to the Microsoft Intune Admin Centre:
Configuration Profile:
- Devices
- Manage Devices drop-down
- Configuration
- Create
- New Policy
On the Create Profile window, ensure the below are selected:
- Platform: Windows 10 and later
- Profile type: Settings catalog
- Create
Basics
You will now be required to enter the profile details:
- Name: Enter a descriptive name for the policy (e.g., edMesh Microsoft Edge Browser Settings).
- Description: Enter a description for the policy (optional but recommended).
- Click Next
Configuration settings
Here you would need to add the settings for the profile.
- Select Add Settings
In the Settings picker window, search and select the following settings:
- Category:
- Search for Microsoft Edge
- Settings:
- Search for and select: Browser sign-in settings (Device)
- Search for and select: Configure whether a user always has a default profile automatically signed in with their work or school account
- Search for and select: Control where developer tools can be used (User)
- Once all three are selected, click the X button in the top right corner
- Once the setting are added, ensure they are all set to Enaled
-
Control where developer tools can be used (User)
- Set to Allow using the the developer tools
-
Browser sign-in settings (Device)
- Set to Force users to sign-in to the browser
#Note: Developer tools should only be enabled for initial testing and disabled for student devices.
Select Next to move to the Scope Tags tab and select Next again, as you will not be required to make any changes.
Assignments
Under the Included groups section
- Select Add groups
- Select the group you want to apply the settings to (e.g., Students)
- Select Next
Review and Create:
- Review your settings and click Create.
- Refresh the page to see your newly created configuration profile.
Creating a Configuration Profile for Managed Edge Extensions
Configuration Profile:
Create a new Profile as in the previous steps.
- Devices
- Manage Devices drop-down
- Configuration
- Create
- New Policy
On the Create Profile window, ensure the below are selected:
- Platform: Windows 10 and later
- Profile type: Settings catalog
- Create
Basics
- Name: Enter a descriptive name for the policy (e.g., edmesh Managed Edge Chromium Extensions).
- Description: Enter a description for the policy (optional but recommended).
- Click Next
Configuration Settings
- Select: Add settings
Search and select the following settings
- Settings:
- Control where developer tools can be used
- Control which extensions are installed silently
- Once all are selected, click the X button in the top right corner
- Once the settings are added, ensure they are all set to Enaled
-
Control where developer tools can be used (Device)
- Set to Allow using the the developer tools
-
Control where developer tools can be used (User)
- Set to Allow using the the developer tools
#Note: Developer tools should only be enabled for initial testing. It should be disabled everywhere for student devices
Configure Extensions
You will need App ID and URL found in your Intune Settings on the edMesh Dashboard.
- In the Extension/App ID field, enter your personalised App ID and URL
- Ensure they are added and separated by a semicolon.
Select Next to move to the Scope Tags tab and select Next again, as you will not be required to make any changes.
Assignments
Under the Included groups section
- Select Add groups
- Select the group you want to apply the settings to (e.g., Students)
- Select Next
Review and Create:
- Review your settings and click Create.
- Refresh the page to see your newly created configuration profile.
edMesh Windows Helper Application
#Note on .Net Runtime:
If the device does not already have a .Net runtime installed, you will need to add the Windows Desktop Runtime as a prerequisite. Follow the same steps as described below.
Full Instructions:
- Refer to Microsoft's official documentation for detailed instructions.
- edMesh simplified instructions
Configuring Desktop Runtime
- Select Apps
- All apps
- Create
On the Select app type window
- Under Other app types, select Windows app (Win32)
- Click Select
App Information
- Click Select app package file
- Click OK on the App package file pane.
- Browse and select the Windows desktop runtime file with the extension .intunewin.
App Information
- Name and Description: will be automatically populated (You may edit this)
- Publisher: Microsoft Corporation
- App Version: Enter the desktop runtime app version you uploaded.
- Click Next
Program
- Install command: `aspnetcore-runtime-6.0.15-win-x86.intunewin /install /quiet /norestart`
- Uninstall command: `aspnetcore-runtime-6.0.15-win-x86.intunewin /uninstall /quiet /norestart`
- Click Next.
#Note: Please note that the highlighted needs to match the version of the Windows desktop runtime you uploaded.
Requirements
- Operating system architecture: Both 32-bit and 64-bit
- Minimum operating system: Windows 10 1607
- Click Next
Detection Rules
- Select Manually configure detection rule.
- Click Add and configure as follows:
- Rule Type: File
- Path: `C:\Program Files (x86)`
- File or Folder: `dotnet`
- Detection method: File or folder exists
- Click OK
#Note: There are no Dependencies or Supersedence settings required. Continue clicking the Next button until you reach the Assignments tab.
Assignments
- Required: Click Add group (assign the application to the same groups as used for the configuration profiles)
- Select Next
Review and Create
- Review your settings and click Create.
- You will see a notification that your application has been created.
Device Setup
When signing onto the device with a student account. The configuration profile installs the edMesh extension on the Edge Browser. The extension calls the API to fetch updated or new details from Intune.
To add the user to the device, you or the user would need to add the account by navigating to:
- Settings
- Accounts
- Access Work or School
- Connect
- Add the student's email and follow the prompts
#Note: Once the process is completed, the extension will install. The device may require you to sign out and back in with an Azure student account or restart the device.
Once installed, the device will be added to your edMesh Dashboard.
#Note: The process is the same as for a new device.
The device information will be added to your Microsoft Intune admin center as well.
Navigate to:
- Devices
- All devices
To ensure the profile has been added to the Edge Browser and is in use. Your Edge Browser icon will display a briefcase on the icon
You may view the extension on the Extensions tab and will be able to pin the extension to the Edge Browser.
Don't hesitate to reach out.
We're here to help!