Zecurit supports automated agent deployment using Microsoft System Center Configuration Manager (SCCM). This method allows administrators to silently install the Zecurit Agent across hundreds or thousands of Windows devices in a structured, policy-driven way.
This guide explains the steps to package and deploy the Zecurit Agent using SCCM.
When to Use This Method
Use SCCM enrollment when:
- You manage a large fleet of Windows devices in an enterprise network
- Devices are domain-joined
- You want a silent, policy-driven deployment
- Your organization already uses SCCM for software distribution
Prerequisites
Before starting, ensure the following:
| Requirement | Description |
|---|---|
| Admin Privileges | Required to create and deploy packages in SCCM |
| Network Share | A shared folder accessible by all target machines (e.g., \\Server\MyShare) |
| Permissions | Target devices must have read/execute access to the shared folder |
| Firewall Rules | Windows Firewall or security policies should not block SCCM operations |
| SCCM Distribution Point | Must be configured and reachable by client devices |
Step-by-Step: Installing Zecurit Agent via SCCM
Step 1: Download and Extract the Agent Files
- Go to the Zecurit portal.
- Download the file:
ZecuritAgentStartupScript.zip - Extract its contents — you’ll find:
- ZecuritAgentStartup.bat (Startup script)
- ZecuritAgentInstaller.msi (Agent installer)
- Optional: Supporting PowerShell scripts
Step 2: Copy Files to a Shared Network Location
- Create or use an existing shared folder (e.g., \\Server\MyShare)
- Copy the extracted agent files into this folder.
- Ensure read and execute permissions for all target devices.
???? Test access from a client machine using \\Server\MyShare to confirm connectivity.
Step 3: Create a Package in SCCM
- Open SCCM Console
- Navigate to: Software Library → Application Management → Packages
- Click Create Package:
- Name: Zecurit Agent Deployment
- Description: Silent installation of Zecurit Agent
- Source folder: \Server\MyShare
- Select Standard Program, then configure the install command:
- Command: ZecuritAgentStartup.bat
- Execution: Run with administrative rights
- Run mode: Whether or not a user is logged in
- Save and finish the package setup.
Step 4: Distribute and Deploy the Package
- Go to: Software Library → Packages → [Zecurit Agent Deployment]
- Right-click the package and select Distribute Content
- Choose a distribution point
- After content is distributed, click Deploy:
- Target Collection: Select the device collection or AD group to receive the agent
- Deployment Purpose: Required
- Schedule: As needed (e.g., as soon as possible)
Step 5: Monitor Installation Status
- Go to: Monitoring → Deployments Check the deployment status of the Zecurit package.
- Once the agent installs, enrolled devices will appear in the Zecurit Portal under Devices → All Devices.
Summary Table
| Step | Action |
|---|---|
| 1. | Download & extract ZecuritAgentStartupScript.zip |
| 2. | Store files in a shared folder |
| 3. | Create SCCM package with .bat or .msi |
| 4. | Deploy to selected device collection |
| 5. | Monitor installation and confirm enrollment in Zecurit |
Troubleshooting Tips
- Use smsexec.log and execmgr.log on the client machine to check for installation issues.
- Ensure the network share path is accessible with UNC (\Server\Share) format.
- Confirm that SCCM client agent is healthy and connected to the distribution point.
- Validate that no endpoint protection software is blocking the .bat or .msi execution.