> For the complete documentation index, see [llms.txt](https://docs.cybaops.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cybaops.com/getting-started/onboarding/agent-deployment/cybaagent-intune-windows.md).

# CybaAgent - Intune Windows

*<mark style="color:$info;">Intune deployment for Windows</mark>*

This guide walks you through deploying CybaAgent to Windows devices through\
Microsoft Intune. You’ll wrap CybaAgent.exe as a Win32 app and let Intune push it to\
your assigned device groups. The setup takes about 15–20 minutes the first time.

### <mark style="color:$primary;">Before you Start</mark>

Make sure you have the following ready:

* Microsoft Intune admin access (Intune Administrator or Application Administrator  \
  role).
* Access to the CybaOps portal so you can open Asset Manager.
* Target devices already enrolled in Intune.
* A Windows PC for packaging the installer (the IntuneWinAppUtil tool is Windows-only).

## <mark style="color:$primary;">Step 1 — Download CybaAgent and Copy the Install Command from Asset Manager</mark>

1. Sign in to the CybaOps portal and open Asset Manager.
2. Click the Deploy Agent button in the top-right corner.
3. In the Deploy Agent window, set Select Agent to CybaAgent and Select Operating System to Windows.
4. Click Download Agent and save CybaAgent.exe into an empty local folder (for example, C:\IntuneCybaAgent).
5. Leave the Deploy Agent window open — it shows the install command with your   &#x20;activation code pre-filled. You’ll paste this into Intune in Step 4.

{% hint style="warning" %}
**Keep this window open: The Deploy Agent window is the only place you can copy the**\
**install command with the correct activation code (tt-...) for your tenant — don’t close it**\
**until Step 4.**
{% endhint %}

## <mark style="color:$primary;">Step 2 — Wrap CybaAgent.exe as a .intunewin package</mark>

1. Download the Microsoft Win32 Content Prep Tool from GitHub: <https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool>
2. Extract the .zip into a local folder (for example, C:\IntunePrepTool).
3. Open Command Prompt and run IntuneWinAppUtil.exe from that folder.
4. When prompted, enter:&#x20;
   1. Source folder — the folder containing CybaAgent.exe (e.g. C:\IntuneCybaAgent).&#x20;
   2. Setup file — CybaAgent.exe&#x20;
   3. Output folder — where you want the packaged file saved.

The tool produces CybaAgent.intunewin in the output folder. This is the file you’ll upload\
to Intune.

## <mark style="color:$primary;">Step 3 — Add the app in Microsoft Intune</mark>

1. Sign in to the Microsoft Intune admin center at [https://intune.microsoft.com](https://intune.microsoft.com./)
2. Go to Apps → Windows → Add.
3. In the Select app type pane, choose Windows app (Win32) and click Select.
4. Click Select app package file, upload CybaAgent.intunewin, and click OK.
5. On the App information page, fill in the app details (Name: CybaAgent, Publisher: Cybaverse, etc.) and click Next.

## <mark style="color:$primary;">Step 4 — Set the Program Information</mark>

On the Program page, paste the install command from the Deploy Agent window. It\
looks like this, with your unique activation code in place of the placeholder:

{% code overflow="wrap" %}

```
CybaAgent.exe -i -t tt-YOURACTIVATIONCODE -s https://cybaverse.cybaops.com/
```

{% endcode %}

Use the following uninstall command:

{% code overflow="wrap" %}

```
“C:\Program Files\CybaAgentd.exe” -u
```

{% endcode %}

* **Install behaviour:** System.
* **Device restart behaviour:** No specific action.
* **Allow available uninstall:** No

Click Next.

{% hint style="info" %}
**Tip: Always copy the install command directly from Deploy Agent rather than typing it —**\
**that way your activation code is guaranteed to be correct.**
{% endhint %}

## <mark style="color:$primary;">Step 5 — Set Requirements</mark>

On the Requirements page:

* **Operating system architecture:** 64-bit (tick both 32-bit and 64-bit only if you still  \
  run 32-bit Windows).
* **Minimum operating system:** Windows 10 1607 or later (set to match your estate).

Click Next.

## <mark style="color:$primary;">Step 6 — Configure the Detection Rule</mark>

On the Detection rules page:

1. Set Rules format to Manually configure detection rules and click Add.
2. Set Rule type to File.
3. Set the following values:&#x20;
   1. **Path:** C:\Program Files\CybaVerse&#x20;
   2. **File or folder:** CybaAgentd.exe&#x20;
   3. **Detection method:** File or folder exists
4. Click OK, then Next.

Click Next on the Dependencies, Supersedence, and Scope tags pages unless you need to set these for your environment.

## <mark style="color:$primary;">Step 7 — Assign the app</mark>

1. On the Assignments page, under Required, click Add group.
2. Select the Entra ID group(s) you want to deploy CybaAgent to (typically your Windows device group).
3. Click Select, then Next.

## <mark style="color:$primary;">Step 8 — Review and Create</mark>

On the Review + create page, check everything is correct, then click Create. Intune will\
start pushing CybaAgent at the next device check-in. Devices will appear in CybaOps\
Asset Manager once the agent installs and communicates with the server — usually\
within a few minutes.

### <mark style="color:$primary;">What the Command Does</mark>

* **.\CybaAgent.exe** — runs the installer.
* **-i** — tells CybaAgent to install itself.
* **-t tt-UNIQUEACTIVATIONCODE** — your unique activation token, used to register  \
  the agent to your account.
* **-s <https://cybaverse.cybaops.com/>** — the server CybaAgent will report into.

### <mark style="color:$primary;">Troubleshooting</mark>

* **App reports “Install failed” in Intune** — Re-copy the install command from Deploy  \
  Agent and confirm the activation code starts with tt-.
* **Devices not picking up the deployment** — Confirm the device is enrolled in Intune  \
  and synced. You can force a sync from Settings → Accounts → Access work or  \
  school, or via Company Portal.
* **Agent installs but doesn’t appear in Asset Manager** — Confirm the device has  \
  internet access and that no firewall is blocking outbound HTTPS to  \
  cybaverse.cybaops.com.
* **Activation code rejected** — Double-check the code and make sure it starts with tt-.  \
  Re-copy from Deploy Agent rather than typing it.

### <mark style="color:$primary;">Need Help?</mark>

If the deployment still won’t complete, contact our support team and include the Intune\
deployment status and any device install log — that helps us identify the issue quickly.

Please contact <support@cybaops.help> for assistance.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.cybaops.com/getting-started/onboarding/agent-deployment/cybaagent-intune-windows.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
