Managed deployment using Microsoft Intune

Deploy the Push browser extension for Google Chrome, Microsoft Edge, Firefox, Brave, and Comet using Microsoft Intune (previously Microsoft Endpoint Manager).

Because the installation requires creating policies and deploying a PowerShell script, we recommend you implement the changes first in a test environment.

The first step is to generate a config file in the Push admin console. You'll be able to select which browsers you're deploying to when you generate the config, and download a single file.

1. In the Push admin console, go to Browsers > Manage.

2. Then select a Managed enrollment.

3. Select Device Management Software, choose the OS you're deploying to, and the browsers you wish to target. Then click Generate config. This will allow you to download a config file specific to your team.

4. Download and extract the zip file.

You'll need to run the provided PowerShell script via Intune’s platform scripts feature that will run on each endpoint to finalize the configuration. The script will create registry keys and values containing policy settings for the Push browser extension.

In Microsoft Intune admin center, click on Devices (1) > Scripts and remediations (2) > Platform scripts (3), Add (4) and then select Windows 10 and later (5) on the dropdown menu.

On the Add PowerShell script screen, provide a Name (5) for the script and an optional description. Then click Next (6).

Next, upload (8) push_security_browsers.ps1. This is included in the mdm_<Browsers>_Windows.zip file you generated in the Push admin console.

Once uploaded, locate the option Run script in 64 bit PowerShell Host (8) and click Yes. This is an important step to make sure that the registry keys are created in the correct location on 64-bit hosts. Click Next (9).

Click Add groups (10) to specify the group or groups you wish to deploy the settings to, or set it to apply to all users and groups. Click Next (11).

On the final page, review the profile for any errors and finally click Create (12).

Your chosen browsers will now download and install the Push extension automatically, though it may take some time to propagate depending on when devices check-in.