Deploying 1Password to devices using MS Azure intune

skippingrock

Hmm, so this is a thread that I never thought that I’d be posting in, but here I am and here is my post.

So I’m in a new position, yay, but before I can start on my Product Design work, I’ve been put on a crash course to help set up the company’s network and user provisioning, because once upon a long time ago I did this stuff (on a Mac though).

Anyway, so here’s my question. We use 1Password for Teams here, yay, and have quite a few vaults set up for the different user groups. (Although this information isn’t pertinent to my question.) we have a mix of Windows desktops, laptops, Surfaces, MacBooks, iPads and iPhones. I need to get 1Password onto the MS devices for specific users when they login on any device. For other MS applications we have been using MS Azure inTune to install applications that users need. I’ve noticed that 1Password is not available on the MS App Store (or if it is, I can’t find it).

(So here’s my question, really.)
Has anyone tried installing 1Password on MS devices using MS Azure inTune? The desktop application for the laptops and desktop PCs and the app for MS Surface devices.

What about the installation of the browser extension? For Edge (or other browsers)?

Can the updating for the 1Password app be done through the Azure inTune interface?

Any help from either AgileBits or the 1Password user community would be a response of great appreciation.

Cheers, @skippingrock .

---

1Password Version: 7
Extension Version: ?
OS Version: Windows 10
Sync Type: 1Password Teams

AGAlumB

@skippingrock: First, congratulations on the promotion(?)! Hopefully it's an overall positive change, but often that remains to be seen. ;)

You are correct. 1Password for Windows isn't available in the Windows Store since we need to support Windows 7 and 8.1, not just 10 (maybe you do too), and a UWP app wouldn't work for those. So while we may be able to have a UWP app in the future, right now we're focused on our desktop app. The 1Password Edge extension is what we have in the Windows Store now since that's a requirement to integrate with that browser. And we're not willing to give up integration with Firefox, Chrome, or other browsers to move the app to the Windows Store either. Maybe things will open up in the future.

Has anyone tried installing 1Password on MS devices using MS Azure inTune? The desktop application for the laptops and desktop PCs and the app for MS Surface devices.

I don't know of anyone using inTune to do that, but just to clarify, there's currently a single 1Password Windows app that works with 1Password.com accounts, which runs on Windows 7, 8.1, and 10. So no worries about that working on Surfaces. I use it on mine as well as laptops. You probably know that, but others may not. :)

What about the installation of the browser extension? For Edge (or other browsers)?

Ironically, the Edge extension is probably the one thing you should definitely be able to distribute, as it's part of the Windows Store.

Can the updating for the 1Password app be done through the Azure inTune interface?

What is the process there? If it's just a matter of copying files, that may work provided you can get the ownership right. Essentially, for 1Password to function fully (browser integration especially), the app, its data, and the browser all need to be running under the same user account.

Any help from either AgileBits or the 1Password user community would be a response of great appreciation.

I'm sorry I don't have a better answer for you now, but I'll ask around and perhaps others in the community have already tried this.

Kristian

If anyone have more information about that, I am interested too. The company I work, is using 1Password for teams also and is currently migrating to Azure Itune. Would be very nice to deploy 1Password to the devices via Itune.

AGAlumB

@Kristian, @skippingrock: It looks like inTune just copies over the .exe to clients. Is that the case? If so, you may be able to just copy the installation over, as 1Password is fairly self-contained.

To be clear, we do not officially support any method of mass deployment, so any deployment process, changes to installation locations and changes to settings should be tested before deploying company-wide.

1Password 6 for Windows currently uses Inno Setup (though this may change in the future), which supports the command line paramaters found here:

http://jrsoftware.org/ishelp/topic_setupcmdline.htm

Fo example, the /verysilent option will install 1Password silently and users can sign in when they open it. Does that help?

skippingrock

So how will 1Password for Business address this what I’m trying to do here on mobile devices and computers?

AGAlumB

@skippingrock: Without knowing all of the details it's hard to say, so I'd encourage you to reach out to our business team at business@1password.com

I can't promise that what we have today will work with your specific setup, but we're definitely interested to explore that with you to see if it's something we can support in the future — if not already. :)

skippingrock

Yup, I’ve already done that… @margeau is crafting an email for my manager.

We’ll definely explore this with you.
BTW, does the Windows installer support “silent installations”, I think that was one of the Azure inTune auto-installer requirements.

Cheers, @skippingrock

Greg

Hi @skippingrock,

Great news! Let's be in touch. :chuffed:

As for your question, does /verysilent option that Brenty mentioned above suit your needs? Thanks! :+1:

Cheers,
Greg

skippingrock

I will let you know if it works.

Cheers, @skippingrock

bundtkate

I hope it helps @skippingrock, and if we can do anything else to lend a hand, do let us know. I will say, though, that the sales team is an excellent resource as well. They're not just salespeople, they're account managers and their role is to ensure 1Password is the best it can be for your business, so don't hesitate to reach out to them as well. They're rock stars and will do all they can for you (including bugging us where needed). :chuffed:

TheVMaster

@skippingrock It is not possible through Microsoft Intune (there is no such thing as Azure inTune ;-) ) to deploy executable setups. I'm currently packaging the 1password setup.exe into an MSI (there are tools to help you with that), although it would be awesome if Aginebits could just deliver an MSI installer.

In my daily life I'm an IT consultant specialised in the Workplace in combination with Azure AD joined machines, managed through Intune. So I've did some Exe to MSI conversions the last couple of years.

@brenty With 1Password v7 the /verysilent parameter still works.

Update: It works. I used Advanced Installer to 'convert' the exe to an MSI (with the /verysilent parameter and I'm able to upload the MSI to Intune. Too bad it didn't install (just yet), have to check the logs :(

MikeT

Hi @TheVMaster,

Thanks for sharing that with us.

We'd like to have both MSI for businesses and exe for regular downloads, we just don't want to overcomplicate the process of getting it. We'll figure it out.

Do you have a lot of experience with Advanced Installer? Are they reliable? We keep looking for a better installer but so far, every one of them have more cons than pros.

TheVMaster

@MikeT

I've used it for several customers where I only use the 'convert exe to msi functionality to get (not to complex executable setups) uploaded (and deployed through) Intune.

Too bad the MSI I created doesn't install right away, this was because it installed for 'all users' and it should install 'per-user', since it is installing in the user profile.

Retrying to update my Intune package.....will update this if I got a working situation.

MikeT

Thanks or the update, we'll take a look and see if they're any good.

Faizan

Hi,
Is there more information available?
I would like to push 1password 7 with Microsoft Intune to the users in our company. I have tried converting it from EXE to MSI with the /Verysilent install commands etc, but that didnt work.

Greg

Hi @Faizan,

I do not have any new information about the new installer at this point. Could you please tell us what difficulties you bumped into with /verysilent commands?

Thanks in advance!

Cheers,
Greg

Faizan

I tried using MSI Wrapper to create a MSI from an Inno Setup file like 1password. i added the /Verysilent command and tested the file directly on a laptop. within a few seconds 1password was installed. After that i uploaded the msi to Intune to install on it again, Intune says its installed, i also see 1password installed in the Installed applications list in Windows 10 but no shortcut to the application itself. Using the search function also doesnt work..

bundtkate

@Faizan: If you look in %LOCALAPPDATA%\1Password\app\7\ do you see 1Password.exe there?

Kristian

Are they any news here? Our IT admin tried converting the installer exe to MSI too and uploaded it to Intune. It works so far and it is installed on the test clients. While 1Password is coming up (and everything looks good), the intune company portal posts a message, that the 1Password install failed. I think Intune can't detect, if the installation of 1Password was successful or not.

It is annoying, that our IT admins still need to touch every device manually only to install 1Password. Would be very great if you can take care of your business customers.

bundtkate

No news to share yet, @Kristian, but the desire for this is well-documented and definitely something we're taking into strong consideration. 1Password has its roots as a consumer app and the installer is definitely emphasizes this fact today. We are, of course, proud of our roots and hope to continue being a premium consumer option for years to come, but we know well that businesses have different needs and we're going to have to work to meet those as we move forward into that space.

For what it may be worth in the meantime, my understanding was that InTune was, at one point in time, able to deploy exe directly. It has been a good long while since I did that digging and I'd not be at all surprised if things have changed dramatically since then, but it may be worth exploring again all the same. Also, if you have any insight into what InTune is and isn't seeing from the exe installer, that might illuminate why InTune seems confused about whether 1Password installed successfully. The installer does report success and we tested this rather recently, but I have seen at least one other person reporting that their tools weren't seeing this so it's not an entirely isolated incident. I did not have the opportunity to get to the bottom of the previous report, but I remain quite interested in getting some deeper insight into why this seems to happen in some cases if you have any details you can share about deployment in your environment.

Finally, I feel it's worth mentioning that we still generally recommend businesses xcopy the app folder to users' %LOCALAPPDATA% folder as the most reliable means of deployment for the moment. It is a bit low tech for sure, but it's something most deployment tools support making it one of the best options likely to work across the board. If you decide to give it a try (and haven't already), you will need to run 1Password.exe --setup after xcopy completes to set up native messaging for the 1Password extension.

AFernandes

I've managed to get the installer working with Intune by using MSI wrapper from exemsi. The key is to make sure the MSI installation context is set to "Per User" here. If it's set to "Per Machine", Intune will install 1Password to C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ which obviously won't work.

Make sure that when you upload the .msi to Intune the App Install Context is set to User, otherwise you've done something wrong and need to recreate the .msi installer.

bundtkate

Glad that worked out for you, @AFernandes, and thanks for sharing. I've worked with some customers that used a similar trick in the past, but most didn't have any luck. Perhaps it was the user context issue you pointed out. Great to know for the future. :+1:

jonn1e

@AFernandes Thanks for the hint with the exemsi tool. Worked like a charm! :)
@bundtkate I already asked the support for a msi file, but they disappointed me.
Sure it's a option to wrap the exe file manually to an msi file, but 1Password sells business and enterprise plans. ;)
So at least it should be possible to offer a small msi file which can be easily deployed in companys.

Greg

Hi @jonn1e,

We replied to your email today, please check it on your side. Moreover, we understand where you are coming from and we are looking in that direction. However, I do not have anything to share at this point.

If you have other questions, feel free to raise them here or via email. We are always here for you. Thank you! :+1:

++
Greg

ref: SQC-37112-448

patrick_hall

I am curious if an .MSI has been made available yet? If not the can @Kristian please elaborate on the XCopy procedure that should be used as best practice.

Thanks,

Patrick

Blake

Hey @patrick_hall

Please send us a message to support+windows@1password.com and we will see what we can do about the .MSI bit there.

Let me know your Support ID number once you receive an automated reply from our BitBot assistant. This way we will be able to track down your email on our side.

Thanks!

ref: QKZ-13277-395

sgenders

@patrick_hall Is your BitBot assistant still working? I just tried to send a request for help referencing this thread and nothing yet. Been several minutes so maybe it's a moderated not automated queue?

ag_ana

@sgenders:

Thank you for letting us know! I confirm that I have managed to locate your message in our system :+1: We will take a look and someone will get back to your email as soon as possible.

Thank you for your patience!

ref: IDU-37291-394

cecilj

Good morning Support,

Would you happen to have an MSI installer for the 1Password app? Also, do you have instructions for deploying the 1Password plug-in for Chrome and Edge?

Blake

Hi @cecilj 👋

We can definitely help you out in getting an MSI installer for 1Password for Windows, as well as deploying 1Password in the browser amongst your team.

Could you shoot us an email at support+windows@1password.com and mention this thread in the body of your email so we can link things up on our end, and dive right in on getting this setup with you?

JWirtz

Hello Support,
Would you be able to provide me with the MSI installer as well? Thanks!