To use Cloud Filter on managed Windows devices enrolled in Microsoft Intune, you must deploy a system service, a script, and a browser extension.
Use this article if your devices use Microsoft Edge only.
If your devices use Google Chrome or a mix of Chrome and Edge, follow the instructions to install Cloud Filter on Windows using Intune (Chrome or Chrome and Edge)
Before you begin
Force-install the Edge browser on all relevant devices.
Ensure your devices don’t use a non-transparent proxy.
Step 1: Download the Cloud Filter Unified Client
Go to software.smoothwall.com
In the Cloud Filter Unified Client section, select Windows x64.
This downloads smoothwall-unified-client-x-windows.zip to your computer, which contains a few files. For this deployment, you need the WinBook PowerShell script.
Step 2: Provision Intune
Edit the ps1 script file
Edit the file named smoothwall-provisioning-winbook.ps1
Add your UNCL as the serial variable.
Add the Tenant ID if multi-tenanted, or leave the tenant variable empty if you are not.
Save the file as a new version.
For example, if your UNCL is X and your Tenant ID is Y, the file will read:
######################################
$serial = "X"
$tenant = "Y"
######################################
Upload the script
In Intune, go to Devices > Scripts and remediations.
Select the Platform scripts tab (not Remediations).
Select + Add, then choose Windows 10 or later.
In Script settings, select the edited script file.
Set Run this script using the logged-on credentials to No.
Set Enforce script signature check to No.
Set Run script in 64-bit PowerShell to Yes.
Assign the script to the Device Group that requires the Cloud Filter Extension.
Alternative Method to provision Intune
If you can’t run PowerShell scripts, deploy the following Registry values under this registry path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\3rdparty\extensions\dlcaglefdlidioooijnigjhfcndlncfp\policy\Smoothwall\
ForceOS = String (REG_SZ) containing “chromeos”
Serial = String (REG_SZ) containing your UNCL.
TenantId = String (REG_SZ) containing your Tenant ID, if you have a multi-tenant environment. If you don’t, leave this blank.
Step 3: Configure your browser
-
Use Intune to create a policy to configure the setting for Control which extensions are installed silently:
Set the State as Enabled.
Set the Value as: dlcaglefdlidioooijnigjhfcndlncfp;https://edge.microsoft.com/extensionwebstorebase/v1/crx
-
The browser requires additional configuration to force-install the Cloud Filter Extension and lock it down to ensure safe usage.
Configure these listed policies at the device level, not the user level.
Next steps
Check that your deployment works as expected:
You can also prevent users from using their own extensions. If you are already familiar with Intune, you can use Microsoft’s Use group policies to manage Microsoft Edge extensions article.