<!-- Device Inventory Manager — https://wiki.cyberguard.srl/dim/agents/windows-intune/ -->

# Windows with Microsoft Intune

On Windows the agent is deployed as a **Win32 app**: one package with the agent, its installer and your `config.dat`, assigned to a group of devices.

## What you need

- The Windows package: **My Tenant** › **Edit** › **Agent** › **Download Windows agent**.
- A `config.dat` from the same tab (see [Enrollment campaigns and config.dat](https://wiki.cyberguard.srl/dim/agents.md#enrollment-campaigns-and-configdat)).
- The [Microsoft Win32 Content Prep Tool](https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool) (`IntuneWinAppUtil.exe`).
- Permission to create apps in the Microsoft Intune admin center.

The Windows package is a ZIP file containing:

| File | Purpose |
| --- | --- |
| `CyberGuardDIMAgent.exe` | The agent, a signed Windows service. |
| `Install-CyberGuardDimAgent.ps1` | Installs or updates the service. Signed. |
| `Uninstall-CyberGuardDimAgent.ps1` | Removes the service and its files. Signed. |
| `INSTALL-WINDOWS-IT-EN.txt` | Installation notes in Italian and English. |
| `CyberGuard-DIM-Agent-Icon.png` | Icon for the app in Intune and Company Portal. |

## 1. Prepare the package

1. Extract the ZIP into an empty folder, for example `C:\Packages\CyberGuardDIM`.
2. Copy your `config.dat` into the same folder.
3. Open a command prompt in that folder and run:

```powershell
IntuneWinAppUtil.exe -c . -s Install-CyberGuardDimAgent.ps1 -o .\output
```

The tool creates `Install-CyberGuardDimAgent.intunewin` in the `output` folder.

## 2. Create the app in Intune

In the Microsoft Intune admin center, go to **Apps** › **Windows** › **Create** and choose **Windows app (Win32)**. Upload the `.intunewin` file.

**App information**

| Field | Value |
| --- | --- |
| Name | `Inside Technologies CyberGuard DIM Agent` |
| Description | The CyberGuard DIM agent automatically collects information about company devices (hardware, operating system, installed applications, security status) and securely sends it to the Inside Technologies CyberGuard Device Inventory Manager portal, keeping the company's IT inventory always up to date. |
| Publisher | `Inside Technologies` |
| Logo | `CyberGuard-DIM-Agent-Icon.png` from the package |

Users see this name and description in Company Portal, so keep them as they are.

**Program**

| Field | Value |
| --- | --- |
| Install command | `powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\Install-CyberGuardDimAgent.ps1 -AgentExePath .\CyberGuardDIMAgent.exe -ConfigDatPath .\config.dat` |
| Uninstall command | `powershell.exe -ExecutionPolicy Bypass -File .\Uninstall-CyberGuardDimAgent.ps1` |
| Install behavior | **System** |

**Requirements**

| Field | Value |
| --- | --- |
| Operating system architecture | 64-bit |
| Minimum operating system | Your company's supported Windows version |

**Detection rules**

Choose **Manually configure detection rules** and add one rule of type **Registry**:

| Field | Value |
| --- | --- |
| Key path | `HKEY_LOCAL_MACHINE\SOFTWARE\Inside Technologies\CyberGuard DIM Agent` |
| Value name | `InstalledVersion` |
| Detection method | **String comparison** |
| Operator | **Equals** |
| Value | The agent version you are publishing, for example `1.7.17` |
| Associated with a 32-bit app on 64-bit clients | **No** |

> **Use the registry rule, not a file or service rule.** The installer writes `InstalledVersion` only after the service has started. A rule that only checks whether the file or service exists is already satisfied by an older version, so Intune would never install updates on those devices. With *Associated with a 32-bit app* set to **Yes**, Intune looks in the wrong part of the registry and reports a failure even when the agent is running.

**Assignments**

Assign the app as **Required** to the device groups that must report to Device Inventory Manager.

## 3. Check the installation

After Intune has installed the app:

- In Intune, the app shows **Installed** for the device.
- On the PC, the **CyberGuardDimAgent** service is running (`Get-Service CyberGuardDimAgent`).
- In Device Inventory Manager, the device page shows the agent version and the time of the last collection. The first data arrives a few minutes after installation.

If the installation fails, the installer writes the details to:

```text
C:\ProgramData\Inside Technologies\CyberGuard DIM Agent\logs\install.log
```

Collect this file before trying again or contacting support.

## Updating the agent

When a new version appears in the **Agent** tab:

1. Download the new Windows package and extract it into a new folder.
2. Copy the `config.dat` you are already using into the folder.
3. Create a new `.intunewin` file as in step 1.
4. In Intune, open the app and replace the package file under **Properties** › **App information**.
5. In **Detection rules**, change the value of `InstalledVersion` to the new version.

Intune then installs the update on every device where the registry still shows the old version. The installer replaces the existing service cleanly; there is no need to uninstall first.

## Changing the configuration

To change the collection frequency or turn on software metering, download a new `config.dat` and put it in the package. The agent reads the file at every cycle, so the service does not need to be reinstalled, but the new file has to reach the devices.

Intune runs the installer again only when the detection rule is no longer satisfied, that is when the agent version changes. The simplest way is therefore to publish the new `config.dat` together with the next agent update, following the steps in [Updating the agent](#updating-the-agent).

## Removing the agent

Change the assignment of the app to **Uninstall**. Intune runs the uninstall command, which stops and removes the service and its files.