This is a setup by step instructions on how to create your Win32 App for Cisco AnyConnect Secure Mobility Client v4.9.040403 + SBL.
Instructions:
1. Have the full installer for Cisco AnyConnect Secure Mobility Client v4.9.040403 (Comes in ZIP)
2. Extract it and copy the required to another folder to create the win32 package.
3. The ones that need to be copied are:
IMPORTANT:
anyconnect-win-4.9.04043-core-vpn-predeploy-k9.msi
anyconnect-win-4.9.04043-gina-predeploy-k9.msi
Optional:
anyconnect-win-4.9.04043-dart-predeploy-k9.msi
anyconnect-win-4.9.04043-umbrella-predeploy-k9.msi
4. Ideally in your folder to create your:
install-AnyConnect.cmd
CustomProfile.xml - server address
OrgInfo.json - ask your network team
preferences_global.xml - custom preferences
Uninstall-AnyConnect.cmd
5. Install the .msi manually on your device and run the following in powershell:
get-wmiobject Win32_Product | sort-object -property Name | Format-Table IdentifyingNumber, Name, LocalPackage -AutoSize
Select All then copy and paste to Notepad, locate the Cisco AnyConnect modules.
6. Update your batch files:
For: install-AnyConnect.cmd - update using step 3 (installer names)
For: Uninstall-AnyConnect.cmd - update using the GUID from step 5.
7. Download the Win32 App package if you have done so: github.com/Microsoft/Microsoft-Win32-Content-Prep-Tool
8. Run CMD as admin, then cd to path file and your installer or setup: install-AnyConnect.cmd then output to the same folder (your choice)
9. Navigate to: endpoint.microsoft.com - Apps - Add - Win32 - Upload the .intunewin and put your description.
Install command: install-AnyConnect.cmd
Uninstall command: Uninstall-AnyConnect.cmd
Install Behaviour: System
Device restart behavior: No specific action
Requirements:
OS architecture: x86 x64
Minimium operating system: Windows 10 1607
Detection Rules: Manually configure detection rules
Detection Rules: MSI (GUID from Cisco AnyConnect Secure Mobility Client) mentioned in Step 5.
Assignments: Your devices
10. Navigate to Devices - Enrol devices - Enrollment Status Page:
You can use default or create your own, I have created my own with: ESP - Windows Autopilot Hybrid Azure AD over VPN
In the ESP, this option must be selected:
Block device use until these required apps are installed if they are assigned to the user/device with app: Cisco AnyConnect Secure Mobility Client v4.9.040403 + SBL selected.
Then save and test.