Forticlient W32 intune app with profile

3 replies
2558 views

Hello,

I am trying to get a W32 app with Intune to install forticlient and the profile, but the profile won't succeed. Client will be installed but, the profile not. Can someone help me with that?

I used this powershell command as test. It did create the VPN profile, but when I delete fortigateclient and reboot and re-run powershell script, the profile doens't get created anymore.

How can I fix this?

# Restart Process using PowerShell 64-bit
If ($ENV:PROCESSOR_ARCHITEW6432 -eq "AMD64") {
Try {
&"$ENV:WINDIR\SysNative\WindowsPowershell\v1.0\PowerShell.exe" -File $PSCOMMANDPATH
}
Catch {
Throw "Failed to start $PSCOMMANDPATH"
}
Exit
}
# Install FortiClient VPN
Start-Process Msiexec.exe -Wait -ArgumentList '/i FortiClient.msi REBOOT=ReallySuppress /qn'
# Install VPN Profiles
if((Test-Path -LiteralPath "HKLM:\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\LETSCONFIGMGRVPN") -ne $true) { New-Item "HKLM:\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\LETSCONFIGMGRVPN" -force -ea SilentlyContinue };
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\LETSCONFIGMGRVPN' -Name 'Description' -Value 'Lets ConfigMgr VPN' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\LETSCONFIGMGRVPN' -Name 'Server' -Value 'demovpn.someaddress.com' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\LETSCONFIGMGRVPN' -Name 'promptusername' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\LETSCONFIGMGRVPN' -Name 'promptcertificate' -Value 0 -PropertyType DWord -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\LETSCONFIGMGRVPN' -Name 'ServerCert' -Value '0' -PropertyType String -Force -ea SilentlyContinue;