GSA Windows client prerequisites and installation
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 4eed464 · +24 −18 lines · also on GitHub
⋯ 199 unchanged lines
200200
201201
1. Select **Apps** > **All apps** > **Add**.
202202
203
−1. On **Select app type**, under **Other** app types, select **Windows app (Win32)**.
203
+1. On **Select app type**, under **Other app types**, select **Windows app (Win32)**.
204204
205
−1. Select **Select**. The **Add app** steps appear.
205
+1. Choose **Select**. The **Add app** steps appear.
206206
207
−1. Select **Select app package file**.
207
+1. Choose **Select app package file**.
208208
209209
1. Select the folder icon. Open the `.intunewin` file that you created in the previous section.
210210
⋯ 1 unchanged line
212212
213213
1. Select **OK**.
214214
215
−1. On the **App Information** tab, configure these fields:
215
+1. On the **App information** tab, configure these values:
216216
217217
- **Name**: Enter a name for the client app.
218218
- **Description**: Enter a description.
219219
- **Publisher**: Enter **Microsoft**.
220220
- **App Version** *(optional)*: Enter the client version.
221221
222
−1. Use the default values in the remaining fields.
222
+1. Use the default values for the remaining settings.
223223
224224
:::image type="content" source="media/how-to-install-windows-client/add-app.png" alt-text="Screenshot of adding app information to install a client." lightbox="media/how-to-install-windows-client/add-app.png":::
225225
⋯ 9 unchanged lines
235235
236236
|Return code|Code type|
237237
|-----------|---------|
238
− |0|**Success**|
239
− |3010|**Soft reboot**|
240
− |1618|**Retry**|
238
+ |0|Success|
239
+ |3010|Soft reboot|
240
+ |1618|Retry|
241241
242242
:::image type="content" source="media/how-to-install-windows-client/program-install-parameters.png" alt-text="Screenshot of the Program tab for configuring installation parameters." lightbox="media/how-to-install-windows-client/program-install-parameters.png":::
243243
⋯ 17 unchanged lines
261261
262262
1. Select **Add**.
263263
264
−1. Under **Rule type**, select **File**.
264
+1. For **Rule type**, select **File**.
265265
266
−1. Configure these fields:
266
+1. Configure these values:
267267
268268
- **Path**: Enter `C:\Program Files\Global Secure Access Client\TrayApp`.
269269
- **File or folder**: Enter `GlobalSecureAccessClient.exe`.
⋯ 10 unchanged lines
280280
281281
1. Under **Required**, select **+Add group**. Select a group of users or devices, and then choose **Select**.
282282
283
−1. Set the **Restart grace period** to **Enabled** to avoid disrupting users with an abrupt device reboot.
283
+1. Set **Restart grace period** to **Enabled** to avoid disrupting users with an abrupt device reboot.
284284
285285
:::image type="content" source="media/how-to-install-windows-client/restart-grace-period.png" alt-text="Screenshot of the Assignments tab that shows the required groups and the restart grace period set to Enabled." lightbox="media/how-to-install-windows-client/restart-grace-period.png":::
286286
⋯ 193 unchanged lines
480480
481481
:::image type="content" source="media/how-to-install-windows-client/run-script-64-bit.png" alt-text="Screenshot of the tab for creating custom script settings, with the option for running the script in 64-bit PowerShell set to Yes.":::
482482
483
+Select the PowerShell scripts to expand them.
484
+
483485
<details>
484486
<summary>PowerShell detection script</summary>
485487
⋯ 137 unchanged lines
623625
624626
1. The connection icon turns green. Hover over it to open the client status notification, which should show as **Connected**.
625627
626
−:::image type="content" source="media/how-to-install-windows-client/global-secure-access-client-installed-connected.png" alt-text="Screenshot that shows a connected client.":::
628
+ :::image type="content" source="media/how-to-install-windows-client/global-secure-access-client-installed-connected.png" alt-text="Screenshot that shows a connected client.":::
627629
628630
## Client interface
629631
⋯ 1 unchanged line
631633
632634
### Connections view
633635
634
−The **Connections** view shows the client status and the channels configured for the client.
636
+The **Connections** view shows the client status and the channels configured for the client. These actions are available to you:
635637
636
−To disable the client, select the **Disable** button. You can use the information in the **Additional details** section to troubleshoot the client connection. Select **Show more details** to expand the section and view more information.
638
+- To disable the client, select the **Disable** button.
639
+- To troubleshoot the client connection, you can use the information in the **Additional details** section.
640
+- To expand the section and view more information, select **Show more details**.
637641
638642
:::image type="content" source="media/how-to-install-windows-client/client-interface-connections.png" alt-text="Screenshot of the Connections view of the Global Secure Access client interface.":::
639643
⋯ 24 unchanged lines
664668
665669
|Action |Description |
666670
|---------|-------------|
667
−|**Sign out** |*Hidden by default*. Use the **Sign out** action when you need to sign in to the Global Secure Access client with a Microsoft Entra user other than the one that you used to sign in to Windows. To make this action available, update the appropriate [client registry keys](#client-registry-keys). |
668
−|**Disable** |Select the **Disable** action to disable the client. The client remains disabled until you either enable the client or restart the machine. |
671
+|**Sign out** |*Hidden by default*. Use this action when you need to sign in to the Global Secure Access client with a Microsoft Entra user other than the one that you used to sign in to Windows. To make this action available, update the appropriate [client registry keys](#client-registry-keys). |
672
+|**Disable** |Select this action to disable the client. The client remains disabled until you either enable the client or restart the machine. |
669673
|**Enable** |Select this action to enable the Global Secure Access client. |
670
−|**Disable Private Access** |*Hidden by default*. Use the **Disable Private Access** action when you want to bypass Global Secure Access whenever you connect your device directly to the corporate network to access private applications directly through the network rather than through Global Secure Access. To make this action available, update the appropriate [client registry keys](#client-registry-keys). |
674
+|**Disable Private Access** |*Hidden by default*. Use this action when you want to bypass Global Secure Access whenever you connect your device directly to the corporate network to access private applications directly through the network rather than through Global Secure Access. To make this action available, update the appropriate [client registry keys](#client-registry-keys). |
671675
|**Collect logs** |Select this action to collect client logs (information about the client machine, the related event logs for the services, and registry values) and archive them in a .zip file to share with Microsoft Support for investigation. The default location for the logs is `C:\Program Files\Global Secure Access Client\Logs`. You can also collect client logs on Windows by entering the following command in the command prompt: `C:\Program Files\Global Secure Access Client\LogsCollector\LogsCollector.exe" <username> <user>`. |
672676
|**Advanced diagnostics** |Select this action to open the advanced diagnostics and access an assortment of [troubleshooting](#troubleshooting) tools. |
673677
⋯ 71 unchanged lines
745749
|Value |Type |Data |Description |
746750
|-------|------|------|-------------|
747751
|`RestrictNonPrivilegedUsers` |`REG_DWORD` |`0x0` |Nonprivileged users on the Windows device can disable and enable the client. |
748
−|`RestrictNonPrivilegedUsers` |`REG_DWORD` |`0x1` |Nonprivileged users on the Windows device are restricted from disabling and enabling the client. A User Account Control (UAC) prompt requires local administrator credentials for disable and enable options. The administrator can also hide the disable button (see [Hide or unhide menu buttons in the system tray](#hide-or-unhide-menu-buttons-in-the-system-tray)). |
752
+|`RestrictNonPrivilegedUsers` |`REG_DWORD` |`0x1` |Nonprivileged users on the Windows device are restricted from disabling and enabling the client. A User Account Control (UAC) prompt requires local administrator credentials for disable and enable options. The administrator can also hide the **Disable** button (see [Hide or unhide menu buttons in the system tray](#hide-or-unhide-menu-buttons-in-the-system-tray)). |
749753
750754
### Disable or enable Private Access on the client
751755
⋯ 15 unchanged lines
767771
:::image type="content" source="media/how-to-install-windows-client/global-secure-access-registry-key-private-access-enabled.png" alt-text="Screenshot of the Registry Editor with the IsPrivateAccessDisabledByUser registry key highlighted.":::
768772
769773
If the registry value doesn't exist, the default value is `0x0` and Private Access is enabled.
774
+
775
+<a name = "hide-or-unhide-system-tray-menu-buttons"></a>
770776
771777
### Hide or unhide menu buttons in the system tray
772778
⋯ 18 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:31 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.