ExpanDrive at fleet scale.
Silent MSI for Intune and SCCM. Signed apt and yum repos for Linux. Notarized PKG for Jamf and Kandji. Web Management Console for fleet config and lockdowns. Server Edition for Citrix, RDS, and Terminal Services. OAuth into your existing IdP.
— Identity
Auth that flows through your existing IdP.
ExpanDrive doesn't replace your identity stack — it routes through it. OAuth into Okta, Azure AD / Entra, ADFS, Duo, and Google Workspace SSO works without additional setup. MFA, Conditional Access, sign-in policies — all enforce.
OAuth into your existing IdP.
ExpanDrive authenticates against your cloud providers through their OAuth flow — which routes through whatever IdP they already use. Okta, Azure AD / Entra, ADFS, Duo, Google Workspace SSO. MFA enforcement, Conditional Access, sign-in risk policies, named-location restrictions — all apply. ExpanDrive doesn't bypass anything your IdP enforces.
OS-keychain credential storage.
Every authentication token and password lands in the macOS Keychain or Windows Credential Vault — never persisted to disk in plaintext, never sent to ExpanDrive's servers. Your security review's first question ("where do the secrets live?") has the right answer.
Domain Hint for silent OneDrive / SharePoint sign-in.
For OneDrive and SharePoint connections in a managed configuration, the Web Management Console supports a Domain Hint field — the user's email-address domain is pre-filled into the Microsoft sign-in flow so the end user lands directly on your IdP without typing.
— Fleet deployment
Built for the 200-machine rollout.
Signed installers for every OS in your fleet. The packaging and silent-install flags your existing config-management tool already speaks.
Signed MSI for Intune, SCCM, GPO.
Code-signed Microsoft Installer for Windows 10, 11, and Windows Server. Full msiexec /quiet / /passive / /norestart / /l*v support for silent unattended deployment. The installer your existing fleet pipeline expects — no EXE wrapper, no per-machine UI to click through.
Signed apt + yum repositories for Linux.
ExpanDrive Linux ships through signed apt (Debian, Ubuntu) and yum / dnf (RHEL, Fedora, CentOS, Rocky, AlmaLinux) repositories. Add the repo once via your config-management tool; updates flow through the same package manager that runs everything else on the box.
Signed, notarized macOS installer.
Apple-signed, Apple-notarized installer that distributes cleanly through standard macOS MDM tooling. Built on the modern Apple File Provider extension — sandbox-clean, no kernel extension, no Recovery-Mode security prompts at install time.
# Silent install on Windows msiexec /i windows_server_edition64_7.6.3.msi /qn /norestart # Headless license activation "C:\Program Files\ExpanDrive\exfs.exe" --register <server_token> # Mount a configured drive exfs --mount "Production S3" # Linux: signed apt repo + install curl https://packages.expandrive.com/keys/expandrive.asc | gpg --dearmor \ > packages.expandrive.gpg sudo install -o root -g root -m 644 packages.expandrive.gpg /usr/share/keyrings/ sudo sh -c 'echo "deb [arch=amd64 signed-by=/usr/share/keyrings/packages.expandrive.gpg] \ https://packages.expandrive.com/expandrive stable main" \ > /etc/apt/sources.list.d/expandrive.list' sudo apt-get update && sudo apt-get install exfs
— Web Management Console
One configuration. Every desktop in the fleet.
The Web Management Console publishes a single configuration object per license. Every activated device picks up the config; pushing an update ripples to every endpoint without re-installing or re-touching the machine.
One configuration, pushed to every device.
Define a configuration in the Web Management Console — connections, mount points, OAuth tokens, app settings. Every device activated with that configuration's license key picks up the published config automatically. Update the config; devices already activated receive the new version on their next poll.
Managed connections.
A configuration-level toggle that prevents end users from adding or removing drives. Your IT team decides which clouds appear on every desktop in the fleet; users can't go outside that. Standard issue for regulated and compliance-driven environments.
Managed settings.
Companion toggle that prevents end users from changing app-level settings you have pre-configured. Lock cache directory, mount points, OAuth scopes, log levels — anything you set in the WMC stays set on every device.
Defer Authentication for OAuth providers.
For OAuth-based providers (Google Drive, OneDrive, Dropbox, Box), enabling Defer Authentication mounts the drive immediately without forcing the user to complete an OAuth flow at install time. The user is prompted on first interaction with the drive — at which point your IdP's SSO flow runs.
— Server Edition
For RDS, Citrix, and the shared-server edge cases.
Server Edition runs as a system service on Windows Server and Linux. Mounts visible to every user and every system process on the box. SMB re-share for non-ExpanDrive machines. Concurrent file locking on Office docs.
Runs as a Windows Server service.
Not a per-user desktop process. Mounts every cloud as a network filesystem visible to every user logged into the box and every system process on it. The deployment model RDS, Citrix, and Terminal Services environments expect.
Re-shares cloud storage as SMB.
On Windows Server, Server Edition can publish a mounted cloud drive back out over SMB to the rest of your network. The whole office can hit a Google Drive bucket as a UNC path; only the server needs the ExpanDrive license activated for the OAuth flow.
Locks Office documents across users.
Multi-user concurrent file locking on Word, Excel, PowerPoint files served from a Server Edition mount. The "two users opened the same Excel file" problem solves cleanly. Most cloud-drive products in the category don't handle this; Server Edition does.
Linux Server Edition for headless boxes.
The same exfs binary runs as a Linux system service. Native .deb and .rpm packages. Configure through the local web UI on port 28080 — connect via SSH port forwarding for OAuth flows, then run unattended.
— Enterprise Support
A partnership engineer, 24/7, with a sub-30-minute SLA.
ExpanDrive Enterprise runs on Files.com's Five Star Support promise — 24/7/365 availability including holidays and weekends, a dedicated partnership engineer who learns your environment, and priority handling on bug triage and feature requests. Once a customer is on Enterprise Support, they stay on Enterprise Support. The full tier breakdown and escalation path live on the Support page.
Sub-30-minute response.
Published SLA for critical incidents on Enterprise. 24/7/365 including holidays and weekends — the same standard Files.com offers its largest customers.
Dedicated partnership engineer.
A named engineer who learns your fleet shape, IdP configuration, and the specific clouds you mount. First point of contact for ongoing work and after-hours coordination.
Priority bug and feature handling.
Enterprise bug reports move to the front of the triage queue. Improvement requests get priority consideration in R&D planning, with previews of roadmap features and early access to betas.
— Common questions
ExpanDrive Enterprise.
The questions IT teams actually ask before approving a desktop tool for fleet rollout. Straight answers, including the honest line on where ExpanDrive stops and Files.com starts.
— Talk to Sales
Scoping an Enterprise deployment?
Get a quote without leaving this page. Tell us your headcount, OS mix, and the Server Edition or Web Management Console needs — you'll hear back the same business day from someone who can scope, quote, and answer technical questions in one thread.
For volume licensing past 10 users, SAML SSO and audit logs on the orchestration layer, MDM-ready signed installers, and dedicated partnership engineering, the conversation starts here.
Talk to Sales
Tell us about your team — size, OS mix, the integrations and Server Edition seats you'll need. You'll get a tailored response the same business day.
Need a File Orchestration Platform, not just a drive?
The cloud connectors mounting your drive on macOS, Windows, and Linux are the same ones that run on Files.com's high-performance cloud File Orchestration Platform — used by 4,000+ businesses including Equifax, Rag & Bone, Cognizant, and Michelin. If you need automations, audit logs, SFTP / AS2 servers, or compliance reporting on top of your file estate, that lives there.
Roll it out. The IT way.
Silent MSI, signed Linux repos, fleet config via the Web Management Console. Business plan at a flat $29/month for up to 10 users; Enterprise tier covers larger fleets.