Deploy Rublon MFA for Windows using Intune

Last updated on September 5, 2025

Note: This document describes how to deploy Rublon MFA for Windows using Intune. Note that you can also use PDQ Deploy and SCCM to achieve the same results.

Overview of MFA for Windows Using Intune

Microsoft Intune is a cloud-based service that allows managing and securing mobile devices, desktop computers, virtual endpoints, and applications. One of the benefits of Intune is that you can use it to deploy a computer program on multiple devices at once, without requiring physical access to them.

You can use Microsoft Intune to deploy the Rublon for Windows & RDP connector on many devices simultaneously. We recommend you deploy the connector manually if you have only a few devices. However, if you need to deploy the connector on a large number of devices, we recommend using Intune to automate the process.

Before You Start

Ensure you have correctly configured Microsoft Intune so that it will be possible to create and assign an app on multiple devices.
Download the latest version of the Rublon for Windows Logon & RDP connector.

Configure MFA for Windows

Follow these steps to deploy Rublon for Windows Logon and RDP to all your endpoints.

Convert .exe to .intunewin

Intune only accepts .intune files, so you will have to convert the connector’s .exe file to the .intunewin format.

1. Create a new folder, e.g., C:/convert and paste the Rublon connector’s .exe file there.

2. Download the Microsoft Win32 Content Prep Tool (Code → Download ZIP) and unzip it.

2. Open Command Prompt and change the current working directory to the folder to which you unzipped the archive using the cd command, e.g.,

cd C:/Downloads/Microsoft-Win32-Content-Prep-Tool-master

3. Execute the following command (adjust the paths and file name if necessary):

IntuneWinAppUtil -c C:\convert -s RublonForWindows-6.1.3.exe -o C:\convert -q

If you wish to know what each command-line parameter means:

Option	Description
-c <setup_folder>	The folder that contains the Rublon connector’s .exe file.
-s <setup_file>	The name of the Rublon connector’s .exe file.
-o <output_folder>	The output folder for the resulting .intunewin file.
-q	Enables the quiet mode, which suppresses any prompts or messages.

4. You should now have the .intunewin file in your output folder. Keep it there, as you’re going to need it later.

Deploy Rublon MFA to Your Windows Endpoints Using Intune

1. In Microsoft Endpoint Manager, navigate to Apps → All Apps and click Add.

Image showing adding a new app in Intune to enable MFA for Windows Logon and RDP

2. Select Windows app (Win32) as the app type and click Select to confirm your decision.

Image showing selecting app type for the MFA for Windows connector

3. Provide the path for the .intunewin file of the Rublon MFA for Windows Logon connector and click OK.

Image showing selecting the Rublon MFA for Windows app package file

4. In App Information, in the Publisher field, enter Rublon. All other fields are optional. Click Next.

Image showing entering app information in Intune

5. In Program, fill in the form and click Next. Refer to the following image and table.

Image showing entering install command for Rublon MFA for Windows & RDP

Install command	If this is the first deployment of the connector: `.\RublonForWindows-6.1.3.exe /verysilent /token=<token> /key=<secret> /offline=1 /rdpOnly=1 /norestart` Where <token> and <secret> are the values of the System Token and Secret Key of the application of type Windows & RDP from the Applications tab of the Rublon Admin Console. If this is an update of the connector to a newer version: `.\RublonForWindows-6.1.3.exe /verysilent /norestart`
Uninstall command	`.\unis000.exe`
Install behavior	System
Device restart behavior	The Rublon MFA for Windows Logon and RDP connector requires a restart after installation. Choose the device behavior that best suits your needs. We recommend App install may force a device restart because Intune will force a mandatory device restart immediately triggers a restart of the device which may make your users lose unsaved work.

6. In Requirements, fill in the form according to your device requirements and click Next.

Example requirements:

Operating system architecture: 64-bit
Minimum operating system: Windows 10 1607
Other fields are optional

Image showing specifying the requirements before the app is installed

7. In Detection Rules, in the Rules format dropdown, select Manually configure detection rules and then click Add.

Image showing the detection rules tab during app creation in Intune

8. Fill in the form and click OK. There are two detection rules that work with Rublon: file rule and registry rule. You only need one of these. It is your choice which one you prefer. If you do not know which one to choose, just choose the file rule.

Option 1: Using File Rule

Image showing creating a file rule for Rublon MFA for Windows and RDP

Rule type	File
Path	C:\Program Files\Rublon\Logon
File or folder	unins000.exe
Detection method	File or folder exists
Associated with a 32-bit app on 64-bit clients	No

Option 2: Using Registry Rule

Image showing creating a registry rule for Rublon MFA for Windows and RDP

Rule type	Registry
Key path	HKEY_LOCAL_MACHINE\SOFTWARE\Rublon\WindowsLogon
Value name	SystemToken
Detection method	Value exists

9. Skip Dependencies and Supersedence by clicking Next twice.

10. In Assignments, select the endpoints on which the Rublon MFA for Windows connector is to be installed and click Next. You can create a dedicated group of devices (click Add group) or select them all (click Add all devices). This is up to you.

Image showing selecting the endpoints on which the Rublon MFA for Windows connector is to be installed

11. In Review + create, review all your choices and finalize the creation of the new app in Intune by clicking Create.

Image showing the summary of your choices

12. Intune will start uploading the package and you will be informed when it is finished.

You can view the deployment status in the Overview tab.

Just keep in mind that the whole process might take a while. Wait until you see the Device status and User status. No data to display means that you have to wait a little bit more.

Image showing that upload of the file has been finished but deployment might still take a while

13. After the deployment, you should test if the installation of the Rublon for Windows & RDP connector was successful.

Testing Deployment of Rublon MFA for Windows

To test your deployment, connect to at least one of your endpoints and try to log in. After you provide your login and password, a Rublon Prompt should appear. Refer to the following two instructions for step-by-step guidance on how Rublon Multi-Factor Authentication works after installing Rublon:

Updating the Connector

If you wish to update the connector to the latest version:

1. Download the latest version from Rublon Downloads.

2. Edit the existing app or add a new app (by following the steps in the Configure MFA for Windows section), ensuring that you point to the newer package file.

Troubleshooting Your MFA for Windows

Refer to the Troubleshooting section of Rublon MFA for Windows Logon and RDP.

If you encounter any issues with your Rublon integration, please contact Rublon Support.

Rublon 2FA for Windows Logon and RDP

How to deploy Rublon for Windows Logon & RDP on multiple endpoints using PDQ Deploy

How to deploy Rublon for Windows Logon & RDP on many endpoints at once using Microsoft System Center Configuration Manager (SCCM)