Agent Deployment

After a successful single-PC install, this guide covers rolling the agent out across many machines and getting them onto a baseline policy quickly.

Claim keys and enrollment

Devices join a tenant using that tenant's claim configuration, baked into the installer you download. This is what lets a freshly installed agent check in to the right tenant automatically, without an operator touching each machine.

Mass deployment options

  • Silent installer - push the setup with the silent switch through your existing endpoint management or software-distribution tooling.
  • Imaging - include the agent in a golden image; each cloned PC checks in on first boot.
  • Group deployment - stage the installer on a share and run it elevated per machine via your orchestration of choice.

First check-in

As each agent installs, it registers and appears in the console devices list for the tenant. Watch the list fill in during a rollout - a device that never appears usually cannot reach the console or was installed with the wrong tenant's installer.

Apply a policy template

Rather than build a policy from scratch, start from a curated template and refine it. CtrlOne ships starter bundles for common scenarios - a kiosk lockdown, an office baseline, and a lab or classroom profile - which you can apply from the onboarding wizard and then adjust per group.

Roll out to a fleet

  1. Pilot - Confirm one PC installs and checks in cleanly before scaling.
  2. Distribute - Push the silent installer to the fleet through your deployment tooling or image.
  3. Watch check-ins - Track devices appearing in the console and investigate any that don't.
  4. Baseline - Apply a policy template to the group, then tune restrictions to fit.

Frequently asked questions

Do I need a different installer per tenant?

Yes - the installer carries the tenant's claim configuration, so download it from the tenant you want the devices to join.

Can I change a device's policy later?

Yes. Policies are managed centrally in the console and can be reassigned or edited at any time; changes flow to devices on check-in.

What are the starter templates?

Curated bundles for kiosk lockdown, an office baseline, and a lab/classroom profile. They are starting points you refine, not fixed presets.

Deploying at enterprise scale?

The corporate deployment guide covers planning, piloting, and governing policy fleet-wide with roles, SSO, and audit logs.