How to deploy Endpoint Protection using Microsoft Intune

Please see this Microsoft documentation, which explains the process and has a link to the GitHub page to download the Win32 Content Prep Tool - https://learn.microsoft.com/en-us/mem/intune/apps/apps-win32-prepare

Download the prep tool and save it somewhere easily accessible, as you’ll need this later.

You will now need the Defense.com Endpoint Security installer for your preferred operating system (Windows kit 64 bit) is used in this example. Please reach out to us requesting this via a support ticket. We'll then reply to the ticket with the requested installer.

Now you have the installer, you see a zip folder called ‘epskit_x64_7.8.2.254’ or similar, depending on the current version available.

Extract the contents of this folder, right-click and Extract all, use the default folder location or choose a preferred destination.

Now, log in to the Microsoft Admin Centre with your administrator account.

Open the Endpoint Manager (Intune admin centre)

Click the Apps tab.

Then, either click the Windows platform tab or All apps.

Next, click the + Add button.

Select your ‘App type’, which in this case will be Windows app (Win32) under the Other category near the bottom of the list.

Then click Select to move on to the next step.

Click Select app package file, then click the folder button to browse and find the intunewin file that you created earlier.

Click OK, and complete the fields required for the app information.

On the program page, you’ll need the install and uninstall commands for the program. Please use the below, replacing the application name with the name of your file. Leave all other settings as the default.

Select 64-bit and the latest Windows version for OS architecture and minimum OS version is required.

Next, configure the detection rules to look for the presence of a folder called EndpointProtection in the default installation path C:\Program Files\Defense.com.

Dependencies can be configured, but aren't required.

Superdense can be used to remove other apps before installing another app, this isn't required, however, you may wish to use this to remove any other security software in place before deploying Endpoint Protection.

Scope tags are optional; add any if you require them, if not, then leave as the default.

Assignments are where you choose which groups have this application available or removed.

Finally, check that you're happy with the settings you've configured and click Create. You will then be taken back to the apps list, and your intunewin file will be uploaded to Intune.