{"id":2465,"date":"2025-07-02T09:41:19","date_gmt":"2025-07-02T09:41:19","guid":{"rendered":"https:\/\/zecurit.com\/help\/?post_type=docs&#038;p=2465"},"modified":"2025-07-02T09:41:21","modified_gmt":"2025-07-02T09:41:21","slug":"enrollment-via-sccm","status":"publish","type":"docs","link":"https:\/\/zecurit.com\/help\/asset-management\/device-enrollment\/silent-and-bulk-enrollment\/enrollment-via-sccm\/","title":{"rendered":"Enrollment via SCCM"},"content":{"rendered":"\n<p>Zecurit supports automated agent deployment using <strong>Microsoft System Center Configuration Manager (SCCM)<\/strong>. This method allows administrators to silently install the Zecurit Agent across hundreds or thousands of Windows devices in a structured, policy-driven way.<\/p>\n\n\n\n<p>This guide explains the steps to package and deploy the Zecurit Agent using SCCM.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">When to Use This Method<\/h2>\n\n\n\n<p>Use SCCM enrollment when:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You manage a large fleet of <strong>Windows devices in an enterprise network<\/strong><\/li>\n\n\n\n<li>Devices are <strong>domain-joined<\/strong><\/li>\n\n\n\n<li>You want a <strong>silent, policy-driven deployment<\/strong><\/li>\n\n\n\n<li>Your organization already uses SCCM for software distribution<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Prerequisites<\/h2>\n\n\n\n<p>Before starting, ensure the following:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Requirement<\/th><th>Description<\/th><\/tr><\/thead><tbody><tr><td><strong>Admin Privileges<\/strong><\/td><td>Required to create and deploy packages in SCCM<\/td><\/tr><tr><td><strong>Network Share<\/strong><\/td><td>A shared folder accessible by all target machines (e.g., \\\\Server\\MyShare)<\/td><\/tr><tr><td><strong>Permissions<\/strong><\/td><td>Target devices must have read\/execute access to the shared folder<\/td><\/tr><tr><td><strong>Firewall Rules<\/strong><\/td><td>Windows Firewall or security policies should not block SCCM operations<\/td><\/tr><tr><td><strong>SCCM Distribution Point<\/strong><\/td><td>Must be configured and reachable by client devices<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Step-by-Step: Installing Zecurit Agent via SCCM<\/h2>\n\n\n\n<p><strong>Step 1: Download and Extract the Agent Files<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Go to the Zecurit portal.<\/li>\n\n\n\n<li>Download the file: <code>ZecuritAgentStartupScript.zip<\/code><\/li>\n\n\n\n<li>Extract its contents \u2014 you\u2019ll find:\n<ul class=\"wp-block-list\">\n<li>ZecuritAgentStartup.bat (Startup script)<\/li>\n\n\n\n<li>ZecuritAgentInstaller.msi (Agent installer)<\/li>\n\n\n\n<li>Optional: Supporting PowerShell scripts<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p><strong>Step 2: Copy Files to a Shared Network Location<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Create or use an existing shared folder (e.g., \\\\Server\\MyShare) <\/li>\n\n\n\n<li>Copy the extracted agent files into this folder.<\/li>\n\n\n\n<li>Ensure <strong>read and execute permissions<\/strong> for all target devices.<\/li>\n<\/ol>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>???? Test access from a client machine using \\\\Server\\MyShare to confirm connectivity.<\/p>\n<\/blockquote>\n\n\n\n<p><strong>Step 3: Create a Package in SCCM<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open <strong>SCCM Console<\/strong><\/li>\n\n\n\n<li>Navigate to: Software Library \u2192 Application Management \u2192 Packages<\/li>\n\n\n\n<li>Click <strong>Create Package<\/strong>:\n<ul class=\"wp-block-list\">\n<li>Name: Zecurit Agent Deployment<\/li>\n\n\n\n<li>Description: Silent installation of Zecurit Agent<\/li>\n\n\n\n<li>Source folder: \\Server\\MyShare<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select <strong>Standard Program<\/strong>, then configure the install command:\n<ul class=\"wp-block-list\">\n<li>Command: ZecuritAgentStartup.bat<\/li>\n\n\n\n<li>Execution: <strong>Run with administrative rights<\/strong><\/li>\n\n\n\n<li>Run mode: <strong>Whether or not a user is logged in<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Save and finish the package setup.<\/li>\n<\/ol>\n\n\n\n<p><strong>Step 4: Distribute and Deploy the Package<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Go to: Software Library \u2192 Packages \u2192 [Zecurit Agent Deployment]<\/li>\n\n\n\n<li>Right-click the package and select <strong>Distribute Content<\/strong>\n<ul class=\"wp-block-list\">\n<li>Choose a distribution point<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>After content is distributed, click <strong>Deploy<\/strong>:\n<ul class=\"wp-block-list\">\n<li><strong>Target Collection<\/strong>: Select the device collection or AD group to receive the agent<\/li>\n\n\n\n<li><strong>Deployment Purpose<\/strong>: Required<\/li>\n\n\n\n<li>Schedule: As needed (e.g., as soon as possible)<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p><strong>Step 5: Monitor Installation Status<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Go to: Monitoring \u2192 Deployments Check the deployment status of the Zecurit package.<\/li>\n\n\n\n<li>Once the agent installs, enrolled devices will appear in the <strong>Zecurit Portal<\/strong> under <strong>Devices \u2192 All Devices<\/strong>.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Summary Table<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th><strong>Step<\/strong><\/th><th><strong>Action<\/strong><\/th><\/tr><\/thead><tbody><tr><td>1.<\/td><td>Download &amp; extract ZecuritAgentStartupScript.zip<\/td><\/tr><tr><td>2.<\/td><td>Store files in a shared folder<\/td><\/tr><tr><td>3.<\/td><td>Create SCCM package with .<strong>bat<\/strong> or .<strong>msi<\/strong><\/td><\/tr><tr><td>4.<\/td><td>Deploy to selected device collection<\/td><\/tr><tr><td>5.<\/td><td>Monitor installation and confirm enrollment in Zecurit<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Troubleshooting Tips<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Use smsexec.log and execmgr.log on the client machine to check for installation issues.<\/li>\n\n\n\n<li>Ensure the network share path is accessible with <strong>UNC (\\Server\\Share)<\/strong> format.<\/li>\n\n\n\n<li>Confirm that SCCM client agent is healthy and connected to the distribution point.<\/li>\n\n\n\n<li>Validate that no endpoint protection software is blocking the .bat or .msi execution.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Related Articles<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.notion.so\/help-zecurit-com-21ebe43fb75a80e680ced6bf64f15817?pvs=21\" target=\"_blank\" rel=\"noopener\">Enrollment via GPO<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.notion.so\/help-zecurit-com-21ebe43fb75a80e680ced6bf64f15817?pvs=21\" target=\"_blank\" rel=\"noopener\">Enrollment via Intune<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.notion.so\/help-zecurit-com-21ebe43fb75a80e680ced6bf64f15817?pvs=21\" target=\"_blank\" rel=\"noopener\">Domain-Based Enrollment with Zecurit Connector<\/a><\/li>\n<\/ul>\n\n\n\n<p><\/p>\n","protected":false},"featured_media":0,"parent":2456,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-2465","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2465","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/comments?post=2465"}],"version-history":[{"count":1,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2465\/revisions"}],"predecessor-version":[{"id":2520,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2465\/revisions\/2520"}],"up":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2456"}],"wp:attachment":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/media?parent=2465"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/doc_tag?post=2465"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}