Install Cloud Filter Extension on Windows using Intune (Edge Only)

To use Cloud Filter on managed Windows devices enrolled in Microsoft Intune, you must deploy a system service, a script, and a browser extension.

• Use this article if your devices use Microsoft Edge only.
• If your devices use Google Chrome or a mix of Chrome and Edge, follow the instructions to install Cloud Filter on Windows using Intune (Chrome or Chrome and Edge)

Before you begin

• Force-install the Edge browser on all relevant devices.
• Ensure your devices don’t use a non-transparent proxy.

Step 1: Download the Cloud Filter Unified Client

1. Go to software.smoothwall.com
2. In the Cloud Filter Unified Client section, select Windows x64.

This downloads smoothwall-unified-client-x-windows.zip to your computer, which contains a few files. For this deployment, you need the WinBook PowerShell script.

Step 2: Provision Intune

Edit the ps1 script file

1. Edit the file named smoothwall-provisioning-winbook.ps1 
2. Add your UNCL as the serial variable. 
3. Add the Tenant ID if multi-tenanted, or leave the tenant variable empty if you are not.
4. Save the file as a new version.

For example, if your UNCL is X and your Tenant ID is Y, the file will read:

######################################
$serial = "X"
$tenant = "Y"
######################################

Upload the script

1. In Intune, go to Devices > Scripts and remediations.
2. Add a new script for Windows 10 or later.
3. In Script settings, select the edited script file.
4. Set ‘Run this script using the logged-on credentials’ to No.
5. Set ‘Enforce script signature check’ to No.
6. Set ‘Run script in 64-bit PowerShell’ to Yes.
7. Target the script to devices that require the Cloud Filter Extension.

Alternative Method to provision Intune

If you can’t run PowerShell scripts, deploy the following Registry values under this registry path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\3rdparty\extensions\dlcaglefdlidioooijnigjhfcndlncfp\policy\Smoothwall\

• ForceOS = String (REG_SZ) containing “chromeos”
• Serial = String (REG_SZ) containing your UNCL.
• TenantId = String (REG_SZ) containing your Tenant ID, if you have a multi-tenant environment. If you don’t, leave this blank. 

Step 3: Configure your browser

1. Use Intune to create a policy to configure the setting for Control which extensions are installed silently:
   • Set the State as Enabled.
   • Set the Value as: dlcaglefdlidioooijnigjhfcndlncfp;https://edge.microsoft.com/extensionwebstorebase/v1/crx
2. The browser requires additional configuration to force-install the Cloud Filter Extension and lock it down to ensure safe usage. 
   • Use a Settings Catalog policy in Intune.
   • Configure these listed policies at the device level, not the user level.

Next steps

Check that your deployment works as expected:

• Check the Diagnostics page
• Check that your Web Filter policies apply correctly

You can also prevent users from using their own extensions. If you are already familiar with Intune, you can use Microsoft’s Use group policies to manage Microsoft Edge extensions article.