topic Re: Intune AutoPilot Azure Hybrid Join in General Topics

Intune AutoPilot Azure Hybrid Join

John_Creighton — Thu, 04 May 2023 05:06:44 GMT

Hi,

We are looking at Autopilot to setup remote users new laptops and are wondering if CheckPoint has a solution to be able to connect to our network via VPN in order to domain join our laptops via AutoPilot.

I have not found any documentation to point us in the right direction.

Thanks

John

Re: Intune AutoPilot Azure Hybrid Join

PhoneBoy — Thu, 04 May 2023 19:10:59 GMT

Yes, see: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_Windows_MDM_Deployment_Guide/Content/Topics-EP_Security_for_Windows_MDM_DG/Deploying-Endpoint-Agent-using-Intune.htm
I believe most of this also applies to standalone VPN clients as well.

Re: Intune AutoPilot Azure Hybrid Join

John_Creighton — Sun, 07 May 2023 21:25:13 GMT

Hi,

Thanks for the reply, but i am not wanting to deploy an app via intune. I am wanting to connect to our domain network as part of the AutoPilot setup so that our new laptops can be domain joined when they are setup from out of the box.

Re: Intune AutoPilot Azure Hybrid Join

PhoneBoy — Mon, 08 May 2023 17:33:36 GMT

So, as part of an Intune deployment, you want to open a VPN with the Check Point client?
If not, please explain the precise flow you're looking for.

The VPN client does have a CLI, which means it could be called as part of a script.
See: https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN-for-Win/Remote-Access-Clients-CMD.htm

Re: Intune AutoPilot Azure Hybrid Join

Cosmo — Mon, 29 May 2023 16:17:35 GMT

Hi PhoneBoy

- I have the same issue. In part of the Microsoft AutoPilot deployment, we deploy already the CheckPoint Mobile to the machine

- The machine is a Fresh windows machine that didn't join the domain yet

- Our VPN Client (CheckPoint), use Azure MFA to authenticate

- One of the step in the AutoPilot, is to join the machine to the AD Hybrid Domain

- We can successfully call the CheckPoint Mobile. However, when it try to access the MFA page, it keep trying

- My suggestion, is that, it doesn't know where to reach the AzureMFA because the machine is not yet joined the domain.

Any solution would be appreciated

Re: Intune AutoPilot Azure Hybrid Join

PhoneBoy — Tue, 30 May 2023 18:01:16 GMT

I'm not clear what is generating the MFA page here.
If it is the Remote Access client, then the URLs used for SAML must be externally resolvable and reachable without a VPN.