Deploying 1Password to devices using MS Azure intune

edited March 2018 in Windows

Hmm, so this is a thread that I never thought that I’d be posting in, but here I am and here is my post.

So I’m in a new position, yay, but before I can start on my Product Design work, I’ve been put on a crash course to help set up the company’s network and user provisioning, because once upon a long time ago I did this stuff (on a Mac though).

Anyway, so here’s my question. We use 1Password for Teams here, yay, and have quite a few vaults set up for the different user groups. (Although this information isn’t pertinent to my question.) we have a mix of Windows desktops, laptops, Surfaces, MacBooks, iPads and iPhones. I need to get 1Password onto the MS devices for specific users when they login on any device. For other MS applications we have been using MS Azure inTune to install applications that users need. I’ve noticed that 1Password is not available on the MS App Store (or if it is, I can’t find it).

(So here’s my question, really.)
Has anyone tried installing 1Password on MS devices using MS Azure inTune? The desktop application for the laptops and desktop PCs and the app for MS Surface devices.

What about the installation of the browser extension? For Edge (or other browsers)?

Can the updating for the 1Password app be done through the Azure inTune interface?

Any help from either AgileBits or the 1Password user community would be a response of great appreciation.

Cheers, @skippingrock .


1Password Version: 7
Extension Version: ?
OS Version: Windows 10
Sync Type: 1Password Teams

Comments

  • brentybrenty

    Team Member

    @skippingrock: First, congratulations on the promotion(?)! Hopefully it's an overall positive change, but often that remains to be seen. ;)

    You are correct. 1Password for Windows isn't available in the Windows Store since we need to support Windows 7 and 8.1, not just 10 (maybe you do too), and a UWP app wouldn't work for those. So while we may be able to have a UWP app in the future, right now we're focused on our desktop app. The 1Password Edge extension is what we have in the Windows Store now since that's a requirement to integrate with that browser. And we're not willing to give up integration with Firefox, Chrome, or other browsers to move the app to the Windows Store either. Maybe things will open up in the future.

    Has anyone tried installing 1Password on MS devices using MS Azure inTune? The desktop application for the laptops and desktop PCs and the app for MS Surface devices.

    I don't know of anyone using inTune to do that, but just to clarify, there's currently a single 1Password Windows app that works with 1Password.com accounts, which runs on Windows 7, 8.1, and 10. So no worries about that working on Surfaces. I use it on mine as well as laptops. You probably know that, but others may not. :)

    What about the installation of the browser extension? For Edge (or other browsers)?

    Ironically, the Edge extension is probably the one thing you should definitely be able to distribute, as it's part of the Windows Store.

    Can the updating for the 1Password app be done through the Azure inTune interface?

    What is the process there? If it's just a matter of copying files, that may work provided you can get the ownership right. Essentially, for 1Password to function fully (browser integration especially), the app, its data, and the browser all need to be running under the same user account.

    Any help from either AgileBits or the 1Password user community would be a response of great appreciation.

    I'm sorry I don't have a better answer for you now, but I'll ask around and perhaps others in the community have already tried this.

  • If anyone have more information about that, I am interested too. The company I work, is using 1Password for teams also and is currently migrating to Azure Itune. Would be very nice to deploy 1Password to the devices via Itune.

  • brentybrenty

    Team Member

    @Kristian, @skippingrock: It looks like inTune just copies over the .exe to clients. Is that the case? If so, you may be able to just copy the installation over, as 1Password is fairly self-contained.

    To be clear, we do not officially support any method of mass deployment, so any deployment process, changes to installation locations and changes to settings should be tested before deploying company-wide.

    1Password 6 for Windows currently uses Inno Setup (though this may change in the future), which supports the command line paramaters found here:

    http://jrsoftware.org/ishelp/topic_setupcmdline.htm

    Fo example, the /verysilent option will install 1Password silently and users can sign in when they open it. Does that help?

  • So how will 1Password for Business address this what I’m trying to do here on mobile devices and computers?

  • brentybrenty

    Team Member

    @skippingrock: Without knowing all of the details it's hard to say, so I'd encourage you to reach out to our business team at [email protected]

    I can't promise that what we have today will work with your specific setup, but we're definitely interested to explore that with you to see if it's something we can support in the future — if not already. :)

  • Yup, I’ve already done that… @margeau is crafting an email for my manager.

    We’ll definely explore this with you.
    BTW, does the Windows installer support “silent installations”, I think that was one of the Azure inTune auto-installer requirements.

    Cheers, @skippingrock

  • GregGreg

    Team Member

    Hi @skippingrock,

    Great news! Let's be in touch. :chuffed:

    As for your question, does /verysilent option that Brenty mentioned above suit your needs? Thanks! :+1:

    Cheers,
    Greg

  • I will let you know if it works.

    Cheers, @skippingrock

  • bundtkatebundtkate

    Team Member

    I hope it helps @skippingrock, and if we can do anything else to lend a hand, do let us know. I will say, though, that the sales team is an excellent resource as well. They're not just salespeople, they're account managers and their role is to ensure 1Password is the best it can be for your business, so don't hesitate to reach out to them as well. They're rock stars and will do all they can for you (including bugging us where needed). :chuffed:

  • edited June 2018

    @skippingrock It is not possible through Microsoft Intune (there is no such thing as Azure inTune ;-) ) to deploy executable setups. I'm currently packaging the 1password setup.exe into an MSI (there are tools to help you with that), although it would be awesome if Aginebits could just deliver an MSI installer.

    In my daily life I'm an IT consultant specialised in the Workplace in combination with Azure AD joined machines, managed through Intune. So I've did some Exe to MSI conversions the last couple of years.

    @brenty With 1Password v7 the /verysilent parameter still works.

    Update: It works. I used Advanced Installer to 'convert' the exe to an MSI (with the /verysilent parameter and I'm able to upload the MSI to Intune. Too bad it didn't install (just yet), have to check the logs :(

  • MikeTMikeT Agile Samurai

    Team Member

    Hi @TheVMaster,

    Thanks for sharing that with us.

    We'd like to have both MSI for businesses and exe for regular downloads, we just don't want to overcomplicate the process of getting it. We'll figure it out.

    Do you have a lot of experience with Advanced Installer? Are they reliable? We keep looking for a better installer but so far, every one of them have more cons than pros.

  • edited June 2018

    @MikeT

    I've used it for several customers where I only use the 'convert exe to msi functionality to get (not to complex executable setups) uploaded (and deployed through) Intune.

    Too bad the MSI I created doesn't install right away, this was because it installed for 'all users' and it should install 'per-user', since it is installing in the user profile.

    Retrying to update my Intune package.....will update this if I got a working situation.

  • MikeTMikeT Agile Samurai

    Team Member

    Thanks or the update, we'll take a look and see if they're any good.

  • Hi,
    Is there more information available?
    I would like to push 1password 7 with Microsoft Intune to the users in our company. I have tried converting it from EXE to MSI with the /Verysilent install commands etc, but that didnt work.

  • GregGreg

    Team Member

    Hi @Faizan,

    I do not have any new information about the new installer at this point. Could you please tell us what difficulties you bumped into with /verysilent commands?

    Thanks in advance!

    Cheers,
    Greg

  • I tried using MSI Wrapper to create a MSI from an Inno Setup file like 1password. i added the /Verysilent command and tested the file directly on a laptop. within a few seconds 1password was installed. After that i uploaded the msi to Intune to install on it again, Intune says its installed, i also see 1password installed in the Installed applications list in Windows 10 but no shortcut to the application itself. Using the search function also doesnt work..

  • bundtkatebundtkate

    Team Member

    @Faizan: If you look in %LOCALAPPDATA%\1Password\app\7\ do you see 1Password.exe there?

  • Are they any news here? Our IT admin tried converting the installer exe to MSI too and uploaded it to Intune. It works so far and it is installed on the test clients. While 1Password is coming up (and everything looks good), the intune company portal posts a message, that the 1Password install failed. I think Intune can't detect, if the installation of 1Password was successful or not.

    It is annoying, that our IT admins still need to touch every device manually only to install 1Password. Would be very great if you can take care of your business customers.

  • bundtkatebundtkate

    Team Member
    edited November 2019

    No news to share yet, @Kristian, but the desire for this is well-documented and definitely something we're taking into strong consideration. 1Password has its roots as a consumer app and the installer is definitely emphasizes this fact today. We are, of course, proud of our roots and hope to continue being a premium consumer option for years to come, but we know well that businesses have different needs and we're going to have to work to meet those as we move forward into that space.

    For what it may be worth in the meantime, my understanding was that InTune was, at one point in time, able to deploy exe directly. It has been a good long while since I did that digging and I'd not be at all surprised if things have changed dramatically since then, but it may be worth exploring again all the same. Also, if you have any insight into what InTune is and isn't seeing from the exe installer, that might illuminate why InTune seems confused about whether 1Password installed successfully. The installer does report success and we tested this rather recently, but I have seen at least one other person reporting that their tools weren't seeing this so it's not an entirely isolated incident. I did not have the opportunity to get to the bottom of the previous report, but I remain quite interested in getting some deeper insight into why this seems to happen in some cases if you have any details you can share about deployment in your environment.

    Finally, I feel it's worth mentioning that we still generally recommend businesses xcopy the app folder to users' %LOCALAPPDATA% folder as the most reliable means of deployment for the moment. It is a bit low tech for sure, but it's something most deployment tools support making it one of the best options likely to work across the board. If you decide to give it a try (and haven't already), you will need to run 1Password.exe --setup after xcopy completes to set up native messaging for the 1Password extension.

  • I've managed to get the installer working with Intune by using MSI wrapper from exemsi. The key is to make sure the MSI installation context is set to "Per User" here. If it's set to "Per Machine", Intune will install 1Password to C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ which obviously won't work.

    Make sure that when you upload the .msi to Intune the App Install Context is set to User, otherwise you've done something wrong and need to recreate the .msi installer.

  • bundtkatebundtkate

    Team Member

    Glad that worked out for you, @AFernandes, and thanks for sharing. I've worked with some customers that used a similar trick in the past, but most didn't have any luck. Perhaps it was the user context issue you pointed out. Great to know for the future. :+1:

  • jonn1ejonn1e
    edited February 11

    @AFernandes Thanks for the hint with the exemsi tool. Worked like a charm! :)
    @bundtkate I already asked the support for a msi file, but they disappointed me.
    Sure it's a option to wrap the exe file manually to an msi file, but 1Password sells business and enterprise plans. ;)
    So at least it should be possible to offer a small msi file which can be easily deployed in companys.

  • GregGreg

    Team Member

    Hi @jonn1e,

    We replied to your email today, please check it on your side. Moreover, we understand where you are coming from and we are looking in that direction. However, I do not have anything to share at this point.

    If you have other questions, feel free to raise them here or via email. We are always here for you. Thank you! :+1:

    ++
    Greg

    ref: SQC-37112-448

Leave a Comment

BoldItalicStrikethroughOrdered listUnordered list
Emoji
Image
Align leftAlign centerAlign rightToggle HTML viewToggle full pageToggle lights
Drop image/file