cloudflare · cf-rhett · Jul 14, 2026
@@ -341,6 +341,10 @@ Complete Step 4 at least one hour after steps 1, 2, and 3 so clients have enough
 
 By completing this step, you deliver the Cloudflare One Client to targeted macOS devices, either automatically (assignment scope set as **Required**) or on-demand (assignment scope as **Available**) through your company portal.
 
+:::caution
+On versions 2026.3.566.1 and later, Intune may repeatedly reinstall the Cloudflare One Client after you upload the `.pkg`, restarting the client and dropping the WARP connection. This happens because Intune adds the client's embedded framework bundles to the app's **Included apps** detection list, but Intune cannot detect those frameworks as installed applications on their own. To fix this, remove every entry except `com.cloudflare.1dot1dot1dot1.macos` from the **Included apps** list, set **Ignore app version** to **Yes**, and reapply the change each time you upload a new package. Refer to [Repeated reinstalls on macOS with Microsoft Intune](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/known-limitations/#repeated-reinstalls-on-macos-with-microsoft-intune).
+:::
+
 ## iOS
 
 The following steps outline how to deploy the Cloudflare One Agent (Cloudflare One Client) on iOS using Microsoft Intune and preconfigure it with MDM parameters.

@@ -248,6 +248,30 @@ To work around this issue, you can disable Lockdown mode while keeping Always-On
 2.  Use the [`auto_connect`](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters/#auto_connect) and [`switch_locked`](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters/#switch_locked) parameters in the managed configuration for seamless connectivity.
 3.  Instruct users to launch the Cloudflare One agent app and complete the one-time registration manually.
 
+## Repeated reinstalls on macOS with Microsoft Intune
+
+When you deploy the Cloudflare One Client `.pkg` to macOS with Microsoft Intune, Intune may repeatedly reinstall the package. Each reinstall restarts the client and briefly drops the WARP connection, and you may see the client reinstalled several times within a single Intune evaluation cycle.
+
+This affects Cloudflare One Client versions from 2026.3.566.1 — the first release with the redesigned client interface (the new client UI). The redesigned client bundles several embedded frameworks inside the application, which is what triggers the behavior described below. This is an Intune-side detection configuration issue rather than a client defect, so apply the following workaround on any affected version.
+
+This happens because of how Intune detects whether a macOS `.pkg` app is already installed. When you upload the package, Intune automatically populates the app's **Included apps** detection list with every bundle it finds inside the package — including the roughly two dozen embedded framework bundles that ship inside the client (for example `io.flutter.flutter-macos`, `org.sparkle-project.Sparkle`, and several `org.cocoapods.*` bundles). Intune only considers the app installed when _every_ entry in the **Included apps** list is detected on the device.
+
+These embedded frameworks are not independently installable apps. They live inside the client's application bundle and have no installer receipt or standalone presence, so Intune cannot detect them as installed applications on their own. As a result, Intune never detects them, always concludes the app is not fully installed, and reinstalls the package — cycling through each undetectable framework. Intune detects the client's own bundle identifier (`com.cloudflare.1dot1dot1dot1.macos`) correctly the entire time; it is the extra framework entries that fail detection and drive the reinstall loop. Cloudflare has reported this behavior to Microsoft.
+
+To work around this issue, remove the embedded framework bundles from the **Included apps** list so that only the client's own bundle identifier remains, and turn off version-based detection:
+
+1. In the [Microsoft Intune admin center](https://intune.microsoft.com), go to **Apps** > **macOS** and select the Cloudflare One Client app.
+2. Go to **Properties** and, next to **Detection rules**, select **Edit**.
+3. In the **Included apps** list, remove every entry except `com.cloudflare.1dot1dot1dot1.macos`.
+4. Set **Ignore app version** to **Yes** so that detection succeeds regardless of the deployed client version.
+5. Select **Review + save** to apply the change.
+
+![The Included apps detection list in Intune with only the Cloudflare One Client bundle identifier and Ignore app version set to Yes](~/assets/images/cloudflare-one/connections/intune/intune-included-apps-detection.png)
+
+:::note
+Intune repopulates the **Included apps** list with the full set of embedded bundles every time you upload the `.pkg`, so reapply this workaround on each upload.
+:::
+
 ## Windows 11 24H2 performance issues
 
 For Windows 11 24H2 users, Microsoft has confirmed a regression that may lead to performance issues like mouse lag, audio cracking, or other slowdowns. Cloudflare recommends users experiencing these issues upgrade to a minimum [Windows 11 24H2 version KB5062553](https://support.microsoft.com/en-us/topic/july-8-2025-kb5062553-os-build-26100-4652-523e69cb-051b-43c6-8376-6a76d6caeefd) or higher for resolution.

@@ -33,6 +33,7 @@ releaseNotes: |-
 
 
   - Registration may hang at "Checking your organization configuration" due to IPC errors. A system reboot should resolve the error, allowing registration to proceed.
+  - When deploying with Microsoft Intune, the client may be repeatedly reinstalled because Intune adds the client's embedded framework bundles to its install-detection list, and those frameworks cannot be detected as installed on their own. See [Repeated reinstalls on macOS with Microsoft Intune](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/known-limitations/#repeated-reinstalls-on-macos-with-microsoft-intune) for the workaround.
 version: 2026.6.822.0
 releaseDate: 2026-06-29T20:05:45.037Z
 packageURL: https://downloads.cloudflareclient.com/v1/download/macos/version/2026.6.822.0