Intune Support for Windows Gateway Plugin

Intune Support for Windows Gateway Plugin

book

Article ID: CTX261883

calendar_today

Updated On:

Description

Configuring Intune for Windows Gateway Plugin on Microsoft Azure and on Windows PC. 
This is applicable to Citrix Gateway and Windows Gateway Plugin versions 13.0.36.x and above or 12.1.51.x and above. 


Instructions

Administrator configuration

  • Login to Azure portal and navigate to Intune Dashboard. In the below screen, navigate to the left pane and select Intune
  • Create a device profile from Device Configuration section i.e. a VPN profile for Windows]
  • Edit the profile by navigating to the Properties tab as shown below
  • The Base VPN profile should contain the keyword CitrixVPN in the custom XML part so as to recognize this profile is meant for Windows VPN Plugin and the PowerShell script running on the client PC can recognize this
Example [Note the XML can be even left blank if no additional configuration is required]- 
 
<CitrixVPN><auto_open_homepage>TRue</auto_open_homepage><debug_logging>true</debug_logging><language>en</language><lastusername>billta</lastusername><local_lan_access>false</local_lan_access><disableL3>true</disableL3><useragent>NSGiOSplugin</useragent></CitrixVPN>

  • Once the profile is set, one can view the same in device-configuration profile section
  • Deployments should be managed by adding users and groups. The same users/groups should be assigned to the created profile. As we honor the system wide profile, assignment for the same should be for All Users and All Devices. 
  •  
 

Client-Side configuration

  • Go to Accounts -> Access Work or School -> Connect
  • Provide the user/group credentials which are assigned to the profile created [in the above case credentials from BillGrp or HariGrp]
  • Now once more perform the same operation for VPN profile to be pushed
  • The devices enrolled can be viewed from the azure portal



NOTE: Using Intune integration, you can push gateway URLs and configuration available in windows VPN plugin configuration window. Windows plugin doesn't support any other Intune functionality.