Deploying Lenovo Device Orchestration Agent in Intune
This article provides instructions for creating an Intune application to deploy the Lenovo Device Orchestration Agent.
- Download
the LDO Agent and set the expiry date of the agent.
- In
the LDO console, go to Device Management > Devices.
Click
on the Plus (+) button:
Select
the Device type:
- After selecting
the OS type, configure the following options:
- Change the Installer Expiration from 7
Days to 365 Days.
Change the Maximum Usage from 5 K devices
to 10 K devices.
- Once
the options are configured, click Download Installer and copy it to a
temporary location; in this example, the folder used is “C:\Temp\LDO”.
- Create
an intunewin package to import into Intune as a "Windows app (Win32)"
application: -
- Navigate to and download the “IntuneWinAppUtil.exe”
from https://github.com/Microsoft/Microsoft-Win32-Content-Prep-Tool
- Copy the following files to a temp folder; in this
example, the folder used is “C:\Temp\LDO”
- IntuneWinAppUtil.exe
- UDCsetup.exe (This can be downloaded from the Lenovo
Device Orchestration portal)
- Open CMD as an admin and navigate to “C:\Temp\LDO”,
then run the below commend to create the intunewin package: IntuneWinAppUtil.exe
-c "C:\Temp\LDO" -s "UDCsetup.exe" -o "C:\Temp\LDO"
-q
- Add
the package into Intune:
- In Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com/)
- Navigate
to Apps > All apps, click on Add.
- From
the App type dropdown, select Windows
app (Win32), then click Select.
At
the App information stage, import
the UDCsetup.intunewin package created.
Name: Lenovo Device Orchestration
Description: Lenovo Device Orchestration (LDO) is a cloud-based,
endpoint management solution that can centrally manage and secure any Lenovo
Windows, Android, or Linux device.
Publisher: Lenovo
App Version: 24.4.0.27 (Or later revision of the UDCSetup.exe)
Category: Computer management
At
the Program stage, please set the
below commands for the Install command and Uninstall commands.
Install command: UDCSetup.exe /VERYSILENT
Uninstall Command: C:\Windows\System32\drivers\Lenovo\udc\Data\InfBackup\UDCInfInstaller.exe
-uninstall
At the Requirements
stage, set the following options.
At
the Detection rules stage, select “Manually configure
detection rules”, then click on Add selecting Rule type to Registry:
Note
- For Arm
Architecture:
Key path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\LENOVO\UDC - For x86
Architecture:
Key path: HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\UDC
Value Name: registration-account
Detection method: String comparison
Operator: Equals
Value: (Your LDO
Organization ID)
To
retrieve you LDO Organization ID: In the LDO portal, click the down arrow
next to your account icon in the top-right corner, and select Organization Account.
Your unique ID will be listed under
Profile tab > Organization ID label.
Complete the
remaining steps of the wizard.
Related Articles
Deploying an Application
Device Management allows users to deploy applications to specific devices or to a group of devices. One or more applications can be deployed to a device or group of devices from this page. Apps that are in the Clean state can only be deployed to ...
Lenovo Device Orchestration Requirements
Lenovo Device Orchestration is a cloud-based solution, enabling customers to access detailed results without the need for infrastructure setup or upfront investment. Data collection is performed through lightweight agents. LDO requires devices to ...
Lenovo Device Orchestration Terms & Conditions
These Lenovo Device Orchestration Terms and Conditions (referred to herein as the “Agreement”) outlines the general terms regarding the access and use of Lenovo Device Orchestration software delivered to you as a SaaS solution accessible via a remote ...
Configuring Entra ID for LDO SSO
This guide explains how to migrate Lenovo Device Orchestration (LDO) to Microsoft Entra ID. This process involves setting up a new app in Microsoft Entra, collecting necessary configuration data, and updating the authentication settings in LDO. ...
Integrating Microsoft Entra ID with LDO
Generate Client Secret and Apply Permissions Navigate to the Microsoft Azure Portal. Proceed to Microsoft Entra ID > App registrations and select New registration. Register a new application. Securely note the following generated values: Application ...