Windows

​Automated configuration (Intune, Command Prompt)

The WARP Client for Windows allows for an automated install via tools like Intune, AD, or any script or management tool that can execute a .msi file.

• Example command line to install the client:

  Cloudflare_WARP_Release-x64.msi /quiet ORGANIZATION="exampleorg" SERVICE_MODE="warp" ENABLE="true" GATEWAY_UNIQUE_ID="fmxk762nrj" SUPPORT_URL="http://support.example.com"

  See the deployment parameters for a description of each argument.

• Example command line to uninstall the client:

  msiexec /x Cloudflare_WARP_Release-x64.msi /quiet

​Example configuration with Microsoft Intune

Below are the minimum required steps to deploy Cloudflare WARP with Intune:

1. Login to your Microsoft Intune account.
2. Navigate to Apps > All Apps.
3. Click +Add.
4. As App type, select Line-of-business app from the drop-down menu.
5. Click Select.
6. Click Select app package file and upload the Cloudflare_WARP_Release-x64.msi installer you downloaded previously.
7. Click OK.
8. In the Name field, we recommend entering the version number of the package being uploaded.
9. In the Publisher field, we recommend entering Cloudflare, Inc.
10. In the Command-line arguments field enter a valid set of command line arguments as describe above
    • Example: /quiet ORGANIZATION="exampleorg" SERVICE_MODE="warp" ENABLE="true" GATEWAY_UNIQUE_ID="fmxk762nrj" SUPPORT_URL="http://support.example.com"
11. You don't need to fill other optional fields. Once you've entered all the necessary values, click Next.
12. Add the users or groups who require Cloudflare WARP.
13. Click Next.
14. Review your configuration.
15. Click Create.

Intune is now configured to deploy the Cloudflare WARP Client.

​Manual configuration

If you plan to direct your users to manually download and configure the Cloudflare WARP Client application, they can do so in two ways, depending on your organization's Teams configuration:

• If your organization uses Gateway DNS filtering, users will need to configure a Gateway DoH subdomain.
• If your organization uses Zero Trust policies to control device registration, or Gateway L7 Filtering, users will need to configure a Cloudflare for Teams device registration.

​Manually configure a Gateway DoH Subdomain

If your organization uses Gateway DNS filtering, you will need to instruct your users to configure the Gateway DoH Subdomain field. Follow these instructions to find this value for your Teams configuration.

Then ask your users to complete the following steps:

1. Click on the Cloudflare Logo in the System Tray.
2. Select the gear icon.
3. Next, click Preferences.
4. Select the Connection tab.
5. Enter a value for Gateway DoH subdomain (example: fmxk762nrj).
6. Click Save.

​Manually configure a Cloudflare for Teams device registration

If your organization uses Zero Trust policies to control device registration, or is using the Gateway L7 Filtering and user or device-specific Secure Web Gateway policies, your users will need to login to Cloudflare for Teams by following these instructions:

1. Click on the Cloudflare Logo in the System Tray.
2. Select the gear icon.
3. Next, click Preferences.
4. Select the Account tab.
5. Click Login with Cloudflare for Teams.
6. Enter your team name.
7. Complete the authentication steps required by your organization.