US English (US)
FR French
DE German
ES Spanish
IT Italian
NL Dutch
JP Japanese

Contact Us

If you still have questions or prefer to get help directly from an agent, please submit a request.
We’ll get back to you as soon as possible.

  • Contact Us
English (US)
US English (US)
FR French
DE German
ES Spanish
IT Italian
NL Dutch
JP Japanese
  • Home
  • CyberFOX DNS Filtering
  • Roaming Clients
  • Deployment

Deploy CyberFOX DNS Filtering Client Using Microsoft Intune

Learn to deploy the CyberFOX DNS Filtering Client through Microsoft Intune.

Written by Chris Liles

Updated at February 27th, 2026

Contact Us

If you still have questions or prefer to get help directly from an agent, please submit a request.
We’ll get back to you as soon as possible.

  • AutoElevate Knowledgebase
    New to AutoElevate? START HERE General & Troubleshooting Managing Rules Integrations Announcements FAQ Sales & Marketing
  • Password Boss Knowledgebase
    Using Password Boss Business Administration Password Boss Partner Documents
  • CyberFOX DNS Filtering
    Getting Started Filtering Policies Company and Location Setup Roaming Clients Reporting and Logging Troubleshooting
  • Marketing Toolkit
    MSP Marketing & Education Toolkit
  • Changelogs for Autoelevate and Password Boss
  • CyberFOX Product Roadmap
  • Current Status
+ More

Using the PowerShell Script

Overview

The provided PowerShell script:

  • Downloads the latest CyberFOX DNS Filteringing installer script
  • Installs it silently using your Company ID
  • Verifies installation by checking the CyberFOX service
  • Cleans up installer files
  • Logs installation details for troubleshooting

This deployment method is ideal for:

  • Entra ID–joined or Hybrid Azure AD–joined devices
  • Automated, silent installs
  • Large‑scale deployments with no user interaction

What This Script Does (Plain English)

When run on a device, the script performs the following actions:

  1. Validates configuration
    • Ensures a valid CyberFOX Company ID is set
  2. Downloads the installer
    • Retrieves the latest DNS Filtering installer from CyberFOX CDN
  3. Installs silently
    • Runs the installer with no prompts or reboots
  4. Verifies success
    • Confirms the CyberFOX DNS over HTTPS Service exists
  5. Cleans up
    • Removes the installer file from the temp directory
  6. Logs results
    • Writes an install log to the device’s temp directory

If any step fails, the script exits with a non‑zero code so Intune can report failure.

Prerequisites

Before deploying:

  •  Microsoft Intune tenant
  •  Windows 10 or Windows 11 devices
  •  CyberFOX DNS Filtering tenant
  •  Your CyberFOX Company ID
  •  Devices must have internet access during install

Required Script Modification

Before uploading the script to Intune, edit the following line:

Replace it with your actual CyberFOX Company ID, for example:

 
$companyID = "abc12345"
 
 
⚠️ If this value is not set, the script will exit and fail intentionally.

Recommended Deployment Method

Intune Platform Scripts (PowerShell)
This script is designed to run as a one‑time install using Intune’s PowerShell script deployment.

Proactive Remediations are not recommended for this script because it performs a full install rather than detection/remediation logic.

Step‑by‑Step Intune Deployment Instructions

1. Prepare the Script

  1. Save the script as:
    DNS_Deploy.ps1
  2. Confirm the Company ID is populated
  3. Do not wrap or repackage the script

2. Upload Script to Intune

  1. Open Microsoft Intune Admin Center
  2. Go to:
    Devices > Windows > Scripts > Add
  3. Select Windows 10 and later
  4. Click Add

3. Script Settings

Setting Value
Script location Upload DNS_Deploy.ps1
Run this script using the logged-on credentials No
Enforce script signature check No
Run script in 64-bit PowerShell Yes

Important:
The installer requires SYSTEM context, which is why user credentials must be disabled.

4. Assign the Script

  • Assign to:
    • Device groups (recommended), or
    • All Windows devices
  • Avoid assigning to user groups unless necessary

5. Review and Create

  • Review settings
  • Click Add
  • The script will run automatically on targeted devices

Installation Verification

On the Endpoint

Confirm the following service exists:

CyberFOX DNS over HTTPS Service

You can verify via:

  • Services.msc
  • PowerShell:
PowerShell
 
 
Get-Service "CyberFOX DNS over HTTPS Service"
 
 
 

Intune Reporting

In Intune:

Devices > Windows > Scripts > DNS_Deploy

Look for:

  • ✅ Succeeded = installation completed
  • ❌ Failed = review error output

Log File Location

The installer creates a timestamped log file in:

C:\Users\<context>\AppData\Local\Temp\

Example:

DNSFilterInstall_2026-02-26_143015.log

Use this log when troubleshooting failed installs.

Common Failure Scenarios

Issue Cause Resolution
Script exits immediately Company ID not set Verify Company ID in script
Installer not downloaded Network or CDN blocked Confirm internet access
Service not found Install failed Review install log
Script reports success but app missing Device reboot pending Restart device

Uninstall / Removal (Manual)

This script does not include an uninstall routine.

To remove manually:

  • Use Apps & Features, or
  • Use CyberFOX‑provided uninstall guidance, or
  • Deploy a separate uninstall script via Intune

Security & Compliance Notes

  • Runs fully silent
  • No user interaction required
  • No credentials stored
  • Installer is downloaded directly from CyberFOX CDN
  • Suitable for SOC 2 / ISO 27001 environments

Summary

This Intune deployment method provides: 

 Automated installation
 Silent execution
 Reliable validation
 Clean logging
 Enterprise‑ready deployment

 
 

Using the Agent Installer

To install the Cyber Fox DNS roaming client executable via Intune, follow these steps:

Step 1: Prepare the Installation Package

  1. Download the latest client-specific installer that you downloaded from the location on the portal, which should look like: dns_client_[companyIDhere].exe
  2. Ensure that the executable is downloaded per client site. Do not change the name of the executable.

Step 2: Convert the Executable to .intunewin Format

  1. Download the Intune Win32 Content Prep Tool from Microsoft and follow the instructions.
  2. Use the tool to convert the executable file to .intunewin format. Run the following command:
IntuneWinAppUtil.exe -c <source_folder> -s dns_client_[Company ID Here].exe -o <output_folder>
  1. The tool will generate a .intunewin file in the specified output folder.

Step 3: Create a Win32 App in Intune

  1. Open the Microsoft Endpoint Manager admin center.
  2. Navigate to Apps > Windows > Add.
  3. Select App type as Windows app (Win32).

Step 4: Configure App Information

  1. Upload the .intunewin file.
  2. In the App information section, provide the necessary details such as name, description, publisher, etc.

Step 5: Configure Program

  1. In the Program section, enter the following install command:
Using the Location Specific installer:
dns_client_[locationkeyhere].exe /SP- /SUPPRESSMSGBOXES /VERYSILENT /NORESTART

Using the Generic Installer
dns-latest.exe /SP- /SUPPRESSMSGBOXES /VERYSILENT /NORESTART /COMPANY_ID=[company id]
  1. Enter the uninstall command if needed (e.g., dns_client_[companyidhere].exe /uninstall).
     
  2. The rest of the options, the default options, are fine, adjust as needed for your environment.

Step 6: Configure Requirements

  1. Specify the requirements for app installation, including operating system architecture and the minimum OS version.

Step 7: Configure Detection Rules

  1. Set up detection rules to ensure the app is installed correctly. You can use the file detection method with the following:
    1. Rule type: File
    2. Path: C:\Program Files\CyberFOX DNS Client
    3. File or folder: client.exe
    4. Detection Method: File or Folder exists
    5. Associated with a 32-bit app on a 64-bit Client: No

Step 8: Assign the App

  1. Assign the app to the required groups or devices.

Step 9: Review and Create

  1. Review the configuration and create the app.
 
 

 

cyberfox dnsfilter cyberfox dns filter intune dns deployment msp dns security windows dns filtering cyberfox intune script silent dns install device‑based dns protection dns over https service cyberfox msp deployment intune powershell install endpoint dns security zero trust dns remote workforce protection autopilot dns deployment cyberfox security stack dns logging tenant‑based dns filtering managed dns client enterprise dns protection cyberfox portal integration

Was this article helpful?

Yes
No
Give feedback about this article

Related Articles

  • Microsoft Intune
  • Understanding DNS
  • DNS Security Center Overview
Request a Demo
  • Get Pricing
  • Start Trial
  • Contact
  • Support Center
  • Login
Solutions
AutoElevate
  • AutoElevate Overview
  • Remove Admin Privilege
  • Just-in-Time Admin
  • Blocker
Password Manager
  • Password Manager Overview
  • Features
DNS Filtering
  • DNS Filtering Overview
MSPs
IT Departments
  • Overview
  • State and Local Government
  • K-12 Education
  • Manufacturing
  • Higher Education
Resources
  • Resource Center
  • Group Demos
  • Events
  • The Simple 7™
Company
  • About
  • Leadership
  • Culture & Values
  • News & Press
  • Awards
  • Partnerships
  • Referral Program
  • Trust Center
CyberFox Logo

CALL US (813) 578-8200

© 2025 CYBERFOX LLC ALL RIGHTS RESERVED | Privacy Policy | Terms of Service | Sitemap


Knowledge Base Software powered by Helpjuice

//-------------------------------------------------------------------- // RESOLVE DESTINATION URL //-------------------------------------------------------------------- function resolveRedirect(path) { if (STATUS_SLUGS.includes(path)) { return "https://status.cyberfox.com"; } if (REDIRECTS.hasOwnProperty(path)) { return REDIRECTS[path]; } return null; } //-------------------------------------------------------------------- // CLICK HANDLER (Capture Phase) //-------------------------------------------------------------------- document.addEventListener( "click", function (e) { var link = e.target.closest && e.target.closest(LINK_SELECTOR); if (!link) return; // Let modified clicks behave normally (open in new tab, etc.) if (e.metaKey || e.ctrlKey || e.shiftKey || e.altKey) return; // Only left click if (e.button !== 0) return; var href = link.getAttribute("href") || link.href; if (!href || href.startsWith("#")) return; var path = normalizePath(href); var target = resolveRedirect(path); if (!target) return; // Intercept click BEFORE Helpjuice SPA/PJAX e.preventDefault(); e.stopPropagation(); if (e.stopImmediatePropagation) e.stopImmediatePropagation(); window.open(target, "_blank", "noopener"); }, true // capture ); //-------------------------------------------------------------------- // KEYBOARD ACCESSIBILITY (Enter / Space) //-------------------------------------------------------------------- document.addEventListener( "keydown", function (e) { if (e.key !== "Enter" && e.key !== " ") return; var link = document.activeElement.closest && document.activeElement.closest(LINK_SELECTOR); if (!link) return; var href = link.getAttribute("href") || link.href; if (!href || href.startsWith("#")) return; var path = normalizePath(href); var target = resolveRedirect(path); if (!target) return; e.preventDefault(); e.stopPropagation(); if (e.stopImmediatePropagation) e.stopImmediatePropagation(); window.open(target, "_blank", "noopener"); }, true ); })();
Expand