Enterprise Deployment Handbook for ProSights Excel Add-in

Last updated: 08 July 2025

Purpose & Audience

This handbook gives system administrators a guide to roll out the ProSights Excel Add-in across managed Windows devices using Microsoft Intune for modern device management.

The ProSights addin is built and deployed as a Microsoft ClickOnce executable application.

Contact Support

For technical assistance with the ProSights Excel Add-in deployment, please contact our support team:

• Primary Contact: support@prosights.co
• Response Time: Within 1 hour during business hours, within 1 business day outside of EST working hours.
• Include: Error messages, deployment logs, and environment details

Deployment Overview

Prerequisites

1. Windows 10 or Windows 11
2. Microsoft 365 Apps for enterprise or Office 2019+ (64-bit).
3. .NET Framework 4.8 and VSTO Runtime installed.
4. Network access for https://firmname.prosights.co/app/add-in-download.
Users must have local install rights for trusted publishers.

Production Deployment – ClickOnce (Per-User)

Silent Installation Option

1. Distribute the Public Certificate

Import prosights-public.cer into both Trusted Root CAs and Trusted Publishers on managed devices.

1. Go to Devices > Configuration profiles > Create profile.
2. Platform: Windows 10 and later
3. Profile type: Trusted certificate
4. Upload prosights-public.cer
5. Assign to target device groups
6. Create Trusted Publishers profile with OMA-URI:
   ./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/<thumbprint>/EncodedCertificate
7. To get base64 content if needed: certutil -encode prosights-public.cer prosights-public-b64.txt

2. Configure ClickOnce Trust

Add the distribution URL to the Trusted Sites list using Microsoft Intune.

1. Go to: Intune admin center (https://endpoint.microsoft.com)
   → Devices > Configuration profiles > Create profile
2. Platform: Windows 10 and later
   Profile type: Settings catalog
3. Add settings:
   1. Click + Add settings
   2. Search for: Site to Zone Assignment List
   3. Select: Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Site to Zone Assignment List
4. Configure the setting:
   1. Enable: Site to Zone Assignment List
   2. Click "Add"
   3. Name: https://firmname.prosights.com
   4. Value: 2 (Trusted Sites zone)
5. Assignment: Assign the profile to your target Azure AD groups (users or devices)
6. Review + Create → Wait for deployment (usually 15-30 minutes)

Verification

1. Registry verification:
   1. Check for: HKEY_CURRENT_USER\Software\Microsoft\Office\Excel\Addins\ProsightsExcelAddIn

1. Confirm the add-in loads as expected and login works as expected
2. Confirm the designated user groups receive add-in as expected
3. Test core functionality with representative users
4. Monitor Intune deployment status and resolve any policy application issues

Troubleshooting Matrix

Appendices

Sample PowerShell to Import Cert Locally

Import-Certificate -FilePath .\prosights-public.cer -CertStoreLocation Cert:\LocalMachine\TrustedPublisher