Source: https://vaultcrmhelp.veeva.com/doc/Content/CRM_topics/Getting_Started/MobileDeviceSetup/Windows/DeployMDM.htm

## Deploying Vault CRM for Windows via MDM

Customers can use Mobile Device Management (MDM) to seamlessly deploy and update the Vault CRM for Windows app to all their end users from a single location, ensuring all users have the latest version of the apps without requiring them to manually install and update the app.

Examples of common MDM solutions include Microsoft Intune (recommended) or VMWare WorkSpace ONE. To ensure proper installation for end users, customers must configure their chosen MDM solution for per-user installation when deploying Vault CRM for Windows.

### Prerequisites for Microsoft Intune

To use Microsoft Intune for MDM deployment:

* Users must have an Intune (Microsoft Endpoint Manager) license assigned
* Users must have a valid Microsoft Entra ID (Azure AD) account, for example, john.smith@abcxyz.com
* john.smith is the user
* abcxyz.com is the verified domain name in your Microsoft Entra ID (Azure AD) tenant, which is also the domain registered with Intune
* Devices should be corporate-owned

When enrolling Windows devices for deployment in Microsoft Intune, ensure the following is true for each device:

* InTune registered – Yes
* Microsoft Entra registered – Yes
* Join type – Microsoft Entra Joined

Additionally, MDM user scope must be enabled for end users:

1. Navigate to **Intune Admin Center > Devices > Enroll devices > Automatic Enrollment**.
2. Select **Some** or **All** for MDM user scope.

### Deploying Vault CRM for Windows via Microsoft Intune

To deploy Vault CRM for Windows to end users using Microsoft Intune:

1. Download the .intunewin package.
2. Navigate to **Apps > Windows > Windows apps** in the [Intune Admin Center](https://intune.microsoft.com/).
3. Select **Create**.
4. Select **Windows app (Win32)** for the App Type.
5. Select **Select**.
6. Select **Select app package file**.
7. Upload the .intunewin package you just downloaded.
8. Select **OK**.
9. Select **Next**.
10. Populate the following fields in the **App Information** tab:
    * Name – VaultCRM
    * Description – VaultCRM installation
    * Publisher – Veeva
    * App Version – Version number of the Vault CRM app, for example, 253.0.100
11. Select **Next**.
12. Populate the following fields in the **Program** tab:
    * Install command – powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File install.ps1
    * Uninstall command – powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File uninstall.ps1
    * Install behavior – User
    * Device restart behavior – No specific action
13. Select **Next**.
14. Populate the following fields in the **Requirements** tab:
    * Operating system architecture – 64-bit
    * Minimum operating system – Windows 11 22H2
15. Select **Next**.
16. Populate the following fields in the **Detection rules** tab:
    * Rule type – Use a custom script
    * Script file – detect.ps1
    * Run script as 32-bit process on 64-bit clients – No
    * Enforce script signature check and run script silently – No
17. Select **Next**.
18. Skip the **Dependencies** and **Supersedence** tabs.
19. Assign a user group (for example, All Users) or a combination of user groups in the Required section of the **Assignments** tab. Do not assign device groups.
20. Select **Next**.
21. Review all the settings in the **Review + create** tab.
22. Select **Create** to upload the app to Microsoft Intune. A notification displays in the top right corner when the upload completes. The app is then automatically deployed to the assigned user groups.

### Related Topics

[Vault CRM for Windows](WindowsOverview.htm)

[Signing into the Windows Application](SignIntoWindows.htm)