How to Silently Install and Activate the Extension on Windows Devices Using Intune (1/2) – Josys Help Center

[Notice of UI Terminology Change]
With recent updates, the term "Member" in the system is gradually being changed to "User." If you still see "Member" in this help documentation, please read it as "User." For more details on this change, please refer to this announcement.

Note: The screenshots in this article are currently taken from the Japanese version of the product. Some labels in the images may differ from the English interface.

Overview

This page provides a detailed guide on how to silently install and activate the Josys browser extension on Windows devices using Microsoft Intune.

Target Audience

Administrators planning and executing the bulk deployment of the Josys browser extension.

About the Browser Extension

Please refer to the following pages first for information regarding the browser extension.

1. About the Browser Extension
2. How to Use the Browser Extension

Silent Activation Steps

Simply installing the browser extension is not enough to start detecting SaaS usage. Activation requires passing information such as the "Josys Organization ID" and the "email address of the user registered in Josys" to the extension. This process allows the extension to recognize "which employee in which organization is using the SaaS/application" and begin detection.

Please proceed according to the steps below.

1. Preparation

1-1. Check what values can be retrieved as user variables in your environment by following the steps below.

Press the "Windows key" + "R key".
When the Run dialog box appears, type "cmd" and click "OK".
Once the Command Prompt opens, type the following commands and press "Enter".
First: echo %USERNAME%
Second: whoami /upn
The USERNAME/UPN you confirmed will be used later when preparing the script.

1-2. Check device administrator privileges.

Confirm whether or not each user has administrator privileges on their device.

1-3. Check your Organization ID.

1-4. Review the cases below to find the script that matches your environment.

Sample scripts are available to support multiple scenarios. Review the cases below to find the script that matches your environment.
Once you have prepared the script, upload and run it in Intune to activate the extension installed on each device.

💡 Glossary

*UPN (User Principal Name): A login name used to uniquely identify a user.
*HKCU (HKEY_CURRENT_USER / User Context): Settings applied per logged-in user.
*HKLM (HKEY_LOCAL_MACHINE / System Context): Common settings applied to the entire device.

Example: If "User A" and "User B" have login accounts on the same PC:
Writing settings to HKCU of User A will apply the settings only to User A.
Writing settings to HKLM will apply the settings to all users (User A and User B) on the PC at once.

Case	Conditions	Items and Values Written by Running the Script	Script
A	1. Each user has administrator privileges on the device. 2. The "UPN" confirmed in the Command Prompt is the same as the email address registered in Josys's User Profiles.	▽ OrganizationKey Josys Organization ID ▽ UserEmail Email address registered in Josys	Sample Script for Case A
B	1. Each user has administrator privileges on the device. 2. The "UPN" confirmed in the Command Prompt is different from the email address registered in Josys's User Profiles.	▽ OrganizationKey Josys Organization ID ▽ DeviceIdentity USERNAME	Sample Script for Case B
C	1. Each user does not have administrator privileges on the device. 2. The "UPN" confirmed in the Command Prompt is the same as the email address registered in Josys's User Profiles.	▽ OrganizationKey Josys Organization ID ▽ UserEmail Email address registered in Josys	Sample Script for Case C
D	1. Each user does not have administrator privileges on the device. 2. The "UPN" confirmed in the Command Prompt is different from the email address registered in Josys's User Profiles. 3. The "USERNAME" confirmed in the Command Prompt is different from the local part of the email address (the part before @).	▽ OrganizationKey Josys Organization ID ▽ DeviceIdentity USERNAME	Sample Script for Case D
E	1. Each user does not have administrator privileges on the device. 2. The "UPN" confirmed in the Command Prompt is different from the email address registered in Josys's User Profiles. 3. The "USERNAME" confirmed in the Command Prompt is the same as the local part of the email address (the part before @).	▽ OrganizationKey Josys Organization ID ▽ UserEmail USERNAME@yourdomain.com	Sample Script for Case E
F	1. User environment variables (UPN, USERNAME) cannot be used (cannot retrieve "UPN" or "USERNAME" from the Command Prompt).	▽ OrganizationKey Josys Organization ID ▽ DeviceIdentity COMPUTERNAME	Sample Script for Case F
G	1. The device is not shared by multiple users. 2. Each user does not have administrator privileges on the device. 3. The "USERNAME" confirmed in the Command Prompt is the same as the local part of the email address (the part before @).	▽ OrganizationKey Josys Organization ID ▽ UserEmail USERNAME@yourdomain.com	Sample Script for Case G

1-5. <For Cases B, D, and F Only> Registering the Binding ID

Register the "Binding ID" on the user details page within User Profiles.
Select "IT Device ID" as the Binding ID Type, enter the COMPUTERNAME in the Binding ID field, and click "Execute" to register.

To bind IDs in bulk, you can upload a CSV file of your User Profiles.

Download the User Profiles CSV from Josys.
Open the CSV and add a column named "IT Device ID" on the far right. (If you have already registered an ID manually as described above, this column will already exist.)
Refer to the table above to check what value (USERNAME or COMPUTERNAME) should be written to DeviceIdentity for your case.
Enter the confirmed value (USERNAME or COMPUTERNAME) in the added column.
Click "+ Add" in the top right of User Profiles, and click "Bulk Add via CSV File."
Upload the CSV file.

For details, please refer to the manual below.
Reference: Bulk Editing Member Information via CSV File

2. Apply the Script to Target Devices

Open the Microsoft Intune admin center (https://intune.microsoft.com).
Go to "Devices" > "Scripts and remediations".
Click "Platform scripts".
Click the "+ Add" button and select "Windows 10 and later".
Once the screen transitions, ensure you are on the "Basics" tab and enter the following details:
Name: (e.g., Josys Extension Config)
Description: (Optional)
Once entered, click "Next" at the bottom.
Ensure you are on the "Script settings" tab.
Click the folder icon to the right of the "Script location" field and upload the script you created based on the sample script.
*If you created multiple scripts, upload the first script.
Select the setting for "Run this script using the logged on credentials" based on your case below:
Case A: Yes
Case B: Yes
Case C: No
Case D: No
Case E: No
Case F: No
Case G: No
For "Enforce script signature check", select "No".
For "Run script in 64-bit PowerShell Host", select "Yes".
Once selected, click "Next" at the bottom of the page.
Ensure you are on the "Assignments" tab.
Select the users or devices you want to enable the extension for.
For cases other than Case F: Please add users.
*To enable the extension for specific users only: Click "Add groups" and select the target group.
*To enable the extension for all users: Select "Add all users".

For Case F: Please add devices.
*To enable the extension for specific devices only: Click "Add groups" and select the target group.
*To enable the extension for all devices: Select "Add all devices".
Once selected, click "Next" at the bottom of the page.
The "Review + create" screen will appear. Review the details and click "Create" at the bottom of the page.

This completes the silent activation setup. Next, proceed to the silent installation.

⏭️ How to Silently Install and Activate the Extension on Windows Devices Using Intune (2/2)