cloudflare · cf-rhett · Jul 14, 2026
@@ -341,6 +341,10 @@ Complete Step 4 at least one hour after steps 1, 2, and 3 so clients have enough
 
 By completing this step, you deliver the Cloudflare One Client to targeted macOS devices, either automatically (assignment scope set as **Required**) or on-demand (assignment scope as **Available**) through your company portal.
 
+:::caution
+After uploading the `.pkg`, Intune may repeatedly reinstall the Cloudflare One Client, restarting the client and dropping the WARP connection. To fix this, reorder the app's **Included apps** detection list so that `com.cloudflare.1dot1dot1dot1.macos` is the primary app. Refer to [Repeated reinstalls on macOS with Microsoft Intune](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/known-limitations/#repeated-reinstalls-on-macos-with-microsoft-intune). You must reapply this each time you upload a new package version.
+:::
+
 ## iOS
 
 The following steps outline how to deploy the Cloudflare One Agent (Cloudflare One Client) on iOS using Microsoft Intune and preconfigure it with MDM parameters.

@@ -248,6 +248,25 @@ To work around this issue, you can disable Lockdown mode while keeping Always-On
 2.  Use the [`auto_connect`](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters/#auto_connect) and [`switch_locked`](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters/#switch_locked) parameters in the managed configuration for seamless connectivity.
 3.  Instruct users to launch the Cloudflare One agent app and complete the one-time registration manually.
 
+## Repeated reinstalls on macOS with Microsoft Intune
+
+When you deploy the Cloudflare One Client `.pkg` to macOS with Microsoft Intune, Intune may repeatedly reinstall the package. Each reinstall restarts the client and briefly drops the WARP connection, and you may see multiple reinstalls within a single Intune evaluation cycle.
+
+This happens because of how Intune detects whether a macOS `.pkg` app is already installed. When you upload the package, Intune automatically populates the app's **Included apps** detection list from the bundles inside the package, and uses the app listed first as the primary app for detection. For the Cloudflare One Client, Intune lists a nested framework bundle (`io.flutter.flutter-macos`) first instead of the client's own bundle identifier (`com.cloudflare.1dot1dot1dot1.macos`). Because the primary detection bundle never matches an installed receipt on the device, Intune concludes that the app is missing and reinstalls it on every evaluation.
+
+To work around this issue, reorder the **Included apps** list so that the Cloudflare One Client bundle identifier is the primary detection app:
+
+1. In the [Microsoft Intune admin center](https://intune.microsoft.com), go to **Apps** > **macOS** and select the Cloudflare One Client app.
+2. Go to **Properties** and, next to **Detection rules**, select **Edit**.
+3. In the **Included apps** list, move `com.cloudflare.1dot1dot1dot1.macos` to the top so that it is the first (primary) app.
+4. Select **Review + save** to apply the change.
+
+![Reordering the Included apps list in Intune so that the Cloudflare One Client bundle identifier is the primary app](~/assets/images/cloudflare-one/connections/intune/intune-reorder-included-apps.gif)
+
+:::note
+Intune repopulates the **Included apps** list every time you upload a new Cloudflare One Client `.pkg` version, listing the nested framework bundle first again. Reapply this reorder each time you update the package.
+:::
+
 ## Windows 11 24H2 performance issues
 
 For Windows 11 24H2 users, Microsoft has confirmed a regression that may lead to performance issues like mouse lag, audio cracking, or other slowdowns. Cloudflare recommends users experiencing these issues upgrade to a minimum [Windows 11 24H2 version KB5062553](https://support.microsoft.com/en-us/topic/july-8-2025-kb5062553-os-build-26100-4652-523e69cb-051b-43c6-8376-6a76d6caeefd) or higher for resolution.

@@ -33,6 +33,7 @@ releaseNotes: |-
 
 
   - Registration may hang at "Checking your organization configuration" due to IPC errors. A system reboot should resolve the error, allowing registration to proceed.
+  - When deploying with Microsoft Intune, the client may be repeatedly reinstalled because Intune keys its install detection on a nested framework bundle instead of the client's own bundle identifier. See [Repeated reinstalls on macOS with Microsoft Intune](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/known-limitations/#repeated-reinstalls-on-macos-with-microsoft-intune) for the workaround.
 version: 2026.6.822.0
 releaseDate: 2026-06-29T20:05:45.037Z
 packageURL: https://downloads.cloudflareclient.com/v1/download/macos/version/2026.6.822.0