Deploying Lenovo Device Orchestration Agent in Intune

Deploying Lenovo Device Orchestration Agent in Intune

This article provides instructions for creating an Intune application to deploy the Lenovo Device Orchestration Agent.

  1. Download the LDO Agent and set the expiry date of the agent.
    1. In the LDO console, go to Device Management > Devices.

    2. Click on the Plus (+) button:


    3. Select the Device type:


    4. After selecting the OS type, configure the following options:
      1. Change the Installer Expiration from 7 Days to 365 Days.

      2. Change the Maximum Usage from 5 K devices to 10 K devices.



    5. Once the options are configured, click Download Installer and copy it to a temporary location; in this example, the folder used is “C:\Temp\LDO”.

  2. Create an intunewin package to import into Intune as a "Windows app (Win32)" application: -

    1. Navigate to and download the “IntuneWinAppUtil.exe” from https://github.com/Microsoft/Microsoft-Win32-Content-Prep-Tool

    2. Copy the following files to a temp folder; in this example, the folder used is “C:\Temp\LDO”

      1. IntuneWinAppUtil.exe

      2. UDCsetup.exe (This can be downloaded from the Lenovo Device Orchestration portal)

    3. Open CMD as an admin and navigate to “C:\Temp\LDO”, then run the below commend to create the intunewin package: IntuneWinAppUtil.exe -c "C:\Temp\LDO" -s "UDCsetup.exe" -o "C:\Temp\LDO" -q
       
  3. Add the package into Intune: 

    1. In Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com/)

    2. Navigate to Apps > All apps, click on Add.

    3. From the App type dropdown, select Windows app (Win32), then click Select.

    4. At the App information stage, import the UDCsetup.intunewin package created.


      Name: Lenovo Device Orchestration
      Description: Lenovo Device Orchestration (LDO) is a cloud-based, endpoint management solution that can centrally manage and secure any Lenovo Windows, Android, or Linux device.
      Publisher: Lenovo
      App Version: 24.4.0.27 (Or later revision of the UDCSetup.exe)
      Category: Computer management

    5. At the Program stage, please set the below commands for the Install command and Uninstall commands.

      Install command: UDCSetup.exe /VERYSILENT

      Uninstall Command: 
      C:\Windows\System32\drivers\Lenovo\udc\Data\InfBackup\UDCInfInstaller.exe -uninstall


    6. At the Requirements stage, set the following options.


    7. At the Detection rules stage, select “Manually configure detection rules”, then click on Add selecting Rule type to Registry: 



      Note
      1. For Arm Architecture:
        Key path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\LENOVO\UDC
      2. For x86 Architecture:
        Key path: HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\UDC 

        Value Name:
        registration-account 
        Detection method: String comparison
        Operator: Equals
        Value: (Your LDO Organization ID)

    8. To retrieve you LDO Organization ID: In the LDO portal, click the down arrow next to your account icon in the top-right corner, and select Organization Account.


      Your unique ID will be listed under Profile tab > Organization ID label.



  4. Complete the remaining steps of the wizard.



    • Related Articles

    • Deploying an Application

      Device Management allows users to deploy applications to specific devices or to a group of devices. One or more applications can be deployed to a device or group of devices from this page. Apps that are in the Clean state can only be deployed to ...
    • Lenovo Device Orchestration Requirements

      Lenovo Device Orchestration is a cloud-based solution, enabling customers to access detailed results without the need for infrastructure setup or upfront investment. Data collection is performed through lightweight agents. LDO requires devices to ...
    • Lenovo Device Orchestration Terms & Conditions

      These Lenovo Device Orchestration Terms and Conditions (referred to herein as the “Agreement”) outlines the general terms regarding the access and use of Lenovo Device Orchestration software delivered to you as a SaaS solution accessible via a remote ...
    • Configuring Entra ID for LDO SSO

      This guide explains how to migrate Lenovo Device Orchestration (LDO) to Microsoft Entra ID. This process involves setting up a new app in Microsoft Entra, collecting necessary configuration data, and updating the authentication settings in LDO. ...
    • Integrating Microsoft Entra ID with LDO

      Generate Client Secret and Apply Permissions Navigate to the Microsoft Azure Portal. Proceed to Microsoft Entra ID > App registrations and select New registration. Register a new application. Securely note the following generated values: Application ...