{"id":2464,"date":"2025-07-02T09:25:08","date_gmt":"2025-07-02T09:25:08","guid":{"rendered":"https:\/\/zecurit.com\/help\/?post_type=docs&#038;p=2464"},"modified":"2025-07-02T09:25:10","modified_gmt":"2025-07-02T09:25:10","slug":"enrollment-via-microsoft-intune","status":"publish","type":"docs","link":"https:\/\/zecurit.com\/help\/asset-management\/device-enrollment\/silent-and-bulk-enrollment\/enrollment-via-microsoft-intune\/","title":{"rendered":"Enrollment via Microsoft Intune"},"content":{"rendered":"\n<p>Microsoft Intune provides a modern and centralized way to manage Windows devices in cloud-first organizations. Zecurit supports agent deployment via <strong>Intune Win32 App deployment<\/strong>, enabling a <strong>silent and scalable enrollment<\/strong> process for Azure AD-joined endpoints.<\/p>\n\n\n\n<p>This guide walks you through preparing the Zecurit Agent package and deploying it to target devices using <strong>Microsoft Intune<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">When to use this method<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You\u2019re managing devices with <strong>Microsoft Intune (Endpoint Manager)<\/strong><\/li>\n\n\n\n<li>Devices are <strong>Azure AD joined<\/strong> or <strong>Hybrid joined<\/strong><\/li>\n\n\n\n<li>You want <strong>silent installation<\/strong> without user interaction<\/li>\n\n\n\n<li>You need to deploy the Zecurit Agent at scale to multiple endpoints<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Prepare th installation package<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Download the Agent Package<\/strong>\n<ul class=\"wp-block-list\">\n<li>From the Zecurit portal, download: <code>ZecuritAgentStartupScript.zip<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Extract the Package<\/strong>\n<ul class=\"wp-block-list\">\n<li>Unzip the file to access:\n<ul class=\"wp-block-list\">\n<li><code>ZecuritAgentInstaller.msi<\/code><\/li>\n\n\n\n<li><code>ZecuritAgentStartup.bat<\/code><\/li>\n\n\n\n<li>Optional: <code>InstallZecuritAgent.ps1<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Download the Intune Packaging Tool<\/strong>\n<ul class=\"wp-block-list\">\n<li>Download <code>IntuneWinAppUtil.exe<\/code> from Microsoft\u2019s official GitHub repository: <a href=\"https:\/\/github.com\/Microsoft\/Microsoft-Win32-Content-Prep-Tool\" target=\"_blank\" rel=\"noopener\">IntuneWinAppUtil GitHub<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Create a .intunewin Package<\/strong><ul><li>Run the tool and input:<ul><li><strong>Source folder<\/strong>: The folder containing the extracted Zecurit files<\/li><li><strong>Setup file<\/strong>: <code>ZecuritAgentStartup.bat<\/code> (or <code>.ps1<\/code> if using PowerShell)<\/li><li><strong>Output folder<\/strong>: Where the <code>.intunewin<\/code> file will be saved<\/li><\/ul><\/li><\/ul><\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>IntuneWinAppUtil.exe -c \"C:\\ZecuritAgent\" -s \"ZecuritAgentStartup.bat\" -o \"C:\\Output\"<\/code><\/pre>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>You now have a deployable ZecuritAgentStartup.intunewin package.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Create a deployment policy in Intune<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Sign in to Intune Admin Center<\/strong>  <a href=\"https:\/\/endpoint.microsoft.com\/\" target=\"_blank\" rel=\"noopener\"><\/a><a href=\"https:\/\/endpoint.microsoft.com\" target=\"_blank\" rel=\"noopener\">https:\/\/endpoint.microsoft.com<\/a><\/li>\n\n\n\n<li>Navigate to: <strong>Apps \u2192 Windows \u2192 Add<\/strong><\/li>\n\n\n\n<li>In the <strong>App type<\/strong> dropdown, select: <strong>Windows app (Win32)<\/strong><\/li>\n\n\n\n<li>Upload the <code>.intunewin<\/code> package you created earlier.<\/li>\n\n\n\n<li>Configure the <strong>App Information<\/strong>:\n<ul class=\"wp-block-list\">\n<li>Name: <code>Zecurit Agent<\/code><\/li>\n\n\n\n<li>Description: Silent deployment of Zecurit Agent<\/li>\n\n\n\n<li>Publisher: <code>Zecurit<\/code><\/li>\n\n\n\n<li>App version: Leave blank or fill as needed<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Configure <strong>Program Settings<\/strong>:\n<ul class=\"wp-block-list\">\n<li><strong>Install command<\/strong>: <code>ZecuritAgentStartup.bat<\/code> <\/li>\n\n\n\n<li><strong>Uninstall command<\/strong>: (optional)<\/li>\n\n\n\n<li><strong>Install behavior<\/strong>: <code>System<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Set <strong>Detection Rules<\/strong>:\n<ul class=\"wp-block-list\">\n<li>Choose <strong>File<\/strong> or <strong>Registry<\/strong> based detection:\n<ul class=\"wp-block-list\">\n<li>Example:\n<ul class=\"wp-block-list\">\n<li>Path: <code>C:\\\\Program Files\\\\ZecuritAgent\\\\<\/code><\/li>\n\n\n\n<li>File: <code>zecurit.exe<\/code><\/li>\n\n\n\n<li>Detection method: <code>File exists<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>This ensures the agent won&#8217;t reinstall if it&#8217;s already present.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Assign the package to target devices<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Navigate to the <strong>Assignments<\/strong> section in the app configuration.<\/li>\n\n\n\n<li>Select one or more <strong>Azure AD groups<\/strong> containing the target devices.<\/li>\n\n\n\n<li>Choose assignment type: <strong>Required<\/strong> (for automatic deployment).<\/li>\n<\/ol>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>You can also configure Availability or Uninstall groups as needed.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4: Deployment and Installation<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The Zecurit Agent will be downloaded and installed <strong>silently<\/strong> on the assigned devices.<\/li>\n\n\n\n<li>A <strong>device restart<\/strong> may be required for startup scripts to execute properly.<\/li>\n<\/ul>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Once installed, enrolled devices will appear in the Zecurit portal under Devices &gt; All Devices, and begin reporting inventory and software data.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Summary of required files<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>File<\/th><th>Purpose<\/th><\/tr><\/thead><tbody><tr><td><code>ZecuritAgentInstaller.msi<\/code><\/td><td>Core agent installer<\/td><\/tr><tr><td><code>ZecuritAgentStartup.bat<\/code><\/td><td>Startup script to initiate installation<\/td><\/tr><tr><td><code>.intunewin<\/code><\/td><td>Intune-compatible package created from the above files<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Troubleshooting tips<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ensure assigned devices are <strong>connected to Intune<\/strong> and <strong>not blocked by policy<\/strong>.<\/li>\n\n\n\n<li>Use <strong>Intune App Install Status<\/strong> to track progress per device.<\/li>\n\n\n\n<li>Check the <strong>Device Management Event Log<\/strong> (<code>Applications and Services Logs \u2192 Microsoft \u2192 Windows \u2192 DeviceManagement-Enterprise-Diagnostics-Provider<\/code>) for script errors.<\/li>\n\n\n\n<li>Verify <strong>detection rule accuracy<\/strong> to avoid repeated deployments.<\/li>\n<\/ul>\n\n\n\n<p>By following these steps, you can&nbsp;<strong>automatically deploy the Zecurit Agent<\/strong>&nbsp;to all Intune-managed Windows devices.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Related articles<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.notion.so\/help-zecurit-com-21ebe43fb75a80e680ced6bf64f15817?pvs=21\" target=\"_blank\" rel=\"noopener\">Enrollment via Azure Automation<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.notion.so\/help-zecurit-com-21ebe43fb75a80e680ced6bf64f15817?pvs=21\" target=\"_blank\" rel=\"noopener\">Enrollment via GPO<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.notion.so\/help-zecurit-com-21ebe43fb75a80e680ced6bf64f15817?pvs=21\" target=\"_blank\" rel=\"noopener\">Inventory Overview<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.notion.so\/help-zecurit-com-21ebe43fb75a80e680ced6bf64f15817?pvs=21\" target=\"_blank\" rel=\"noopener\">Agent Protection Settings<\/a><\/li>\n<\/ul>\n\n\n\n<p><\/p>\n","protected":false},"featured_media":0,"parent":2456,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-2464","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/comments?post=2464"}],"version-history":[{"count":5,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2464\/revisions"}],"predecessor-version":[{"id":2519,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2464\/revisions\/2519"}],"up":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2456"}],"wp:attachment":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/media?parent=2464"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/doc_tag?post=2464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}