Configuring the FortiClient application in Intune

To configure the FortiClient application in Intune:

1. In EMS, create a deployment package for the latest FortiClient (Windows) version. See Adding a FortiClient deployment package.
2. Download the MSI package for the created deployment package.
3. Go to Microsoft Win32 Content Prep Tool. From the Code dropdown list, select Download ZIP.
4. Extract the downloaded archive and copy the IntuneWinAppUtil.exe file to a different location:
   1. In Command Prompt, run the InTuneWinAppUtil.exe file.
   2. The prompt asks for the source folder. Enter the location of the MSI package downloaded from EMS.
   3. The prompt asks for the setup file. Specify the .msi file name.
   4. The prompt asks for the output folder. Create a new output folder and specify it.
   5. The prompt asks to specify the catalog folder. Enter N.

      

5. Add the FortiClient application:
   1. In the Microsoft Endpoint Manager admin center, go to Apps > All apps. Click Add.
   2. Configure the App information tab:
      1. From the App type dropdown list, select Windows app (Win32).
      2. Select App package file, then upload the file that you got in the specified output folder after running the command in step 4.
      3. Enter the name, description, and publisher information as desired, then click Next.
   3. In the Install command field, enter commands to install FortiClient. In the example, the command is msiexec /i "FortiClient.msi" /qn TRANSFORMS="FortiClient.mst" /log c:\Educacior... While this command deploys the MSI file, the MST file contains all of the FortiClient configuration, and the MSI file does not contain any customization. For CLI command option descriptions, see Installing FortiClient using the CLI. The Uninstall command field is autopopulated. The value after /x indicates the product code of the FortiClient version to uninstall. This example uninstalls FortiClient 7.0.3. If desired, you can enter another product code to uninstall another FortiClient version. Click Next.

      

   4. From the Operating system architecture dropdown list, select 64-bit or 32-bit as required.
   5. From the Minimum operating system dropdown list, select Windows 10 1607. Click Next.
   6. Configure a detection rule:
      1. From the Rules format dropdown list, select Manually configure detection rules. If the endpoint already has FortiClient installed, Intune checks the installed version against the detection rule and does not start deployment. If the endpoint does not have FortiClient installed, Intune starts deployment.
      2. Click Add.
      3. From the Rule type dropdown list, select MSI.
      4. Enter the product code for the FortiClient version that you are installing. The following lists the product codes for different FortiClient versions:

         FortiClient enterprise version	Product code
         7.0.0	{A795A115-8F19-4590-A8BC-8C39AE13FCF1}
         7.0.1	{5EB98A24-BFFA-4433-81CF-A496861CC299}
         7.0.2	{DA15C0D3-6E0F-414B-B4E8-BB96EF5901B4}
         7.0.3	{8FBAA569-1290-4F0A-97E6-251D261FC078}
         7.0.4	{3DDBBB3A-7AE9-441B-9907-62A233BD9192}
         7.0.5	{6C116CA8-15E1-48F9-BC7A-31493BBCF7BC}
         7.0.6	{2AB573CF-41BF-4633-9E5F-DD6735ACD13B}

         This table does not include product codes for all FortiClient versions that support Intune deployment. See the FortiClient (Windows) Release Notes for your desired version to find the respective product code.

      5. For MSI product version check, select No.
   7. Proceed to the Assignments tab. Click Add group.
   8. Search for and select the group that you created.
   9. Review the summary, then click Create.

To configure user verification for FortiClient, see the following: Configuring user verification with an LDAP server for authentication Configuring user verification with Entra ID authentication Configuring user verification with SAML authentication and an LDAP domain user account Configuring user verification with SAML authentication and an Entra ID server user account