Enterprise Deployment Handbook for ProSights Excel Add-in

Last updated: 25 June 2025

Purpose & Audience

This handbook gives system administrators a guide to roll out the ProSights Excel Add-in across managed Windows devices using Microsoft Intune for modern device management.

The ProSights addin is built and deployed as a Microsoft ClickOnce executable application.

Contact Support

For technical assistance with the ProSights Excel Add-in deployment, please contact our support team:

• Primary Contact: support@prosights.co
• Response Time: Within 1 hour during business hours, within 1 business day outside of EST working hours.
• Include: Error messages, deployment logs, and environment details

Deployment Overview

Prerequisites

1. Windows 10 or Windows 11
2. Microsoft 365 Apps for enterprise or Office 2019+ (64-bit).
3. .NET Framework 4.8 and VSTO Runtime installed.
4. Network access for https://firmname.prosights.co/app/add-in-download.
5. Users must have local install rights for trusted publishers.

Production Deployment – ClickOnce (Per-User)

1. Distribute the Public Certificate

Import prosights-public.cer into both Trusted Root CAs and Trusted Publishers on managed devices.

🪪 How to Get Thumbprint ?

You extract the certificate's thumbprint by:
1. 1. Opening the .cer file on any Windows device.
2. 2. Go to Details → Scroll to Thumbprint → Copy the value (and remove spaces).

1. Go to Devices > Configuration profiles > Create profile.
2. Platform: Windows 10 and later
3. Profile type: Trusted certificate
4. Upload prosights-public.cer
5. Assign to target device groups
6. Create Trusted Publishers profile with OMA-URI:
   ./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/<thumbprint>/EncodedCertificate
7. To get base64 content if needed: certutil -encode prosights-public.cer prosights-public-b64.txt

2. Configure ClickOnce Trust

Add the distribution URL to the Trusted Sites list using Microsoft Intune.

1. Go to: Intune admin center (https://endpoint.microsoft.com)
   → Devices > Configuration profiles > Create profile
2. Platform: Windows 10 and later
   Profile type: Settings catalog
3. Add settings:
   • Click + Add settings
   • Search for: Site to Zone Assignment List
   • Select: Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Site to Zone Assignment List
4. Configure the setting:
   • Enable: Site to Zone Assignment List
   • Click "Add"
   • Name: https://firmname.prosights.com
   • Value: 2 (Trusted Sites zone)
5. Assignment: Assign the profile to your target Azure AD groups (users or devices)
6. Review + Create → Wait for deployment (usually 15-30 minutes)

Verification

1. Registry verification:
   • Check: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
   • Look for https://firmname.prosights.co with value 2

3. Distribute Download URL

Provide users the SSO backed link:
https://firmname.prosights.com/app/addin-download

Users launch the URL, login via SSO, and click Install. The add-in loads on next fresh Excel launch.

4. Verification

• Confirm the add-in loads as expected and login works as expected
• Confirm the designated user groups receive add-in as expected
• Test core functionality with representative users
• Monitor Intune deployment status and resolve any policy application issues

Troubleshooting Matrix

Appendices

Sample PowerShell to Import Cert Locally

Import-Certificate -FilePath .\prosights-public.cer -CertStoreLocation Cert:\LocalMachine\TrustedPublisher