CyberGuard
by Inside Technologies Srl

Windows with Microsoft Intune

On Windows the agent is deployed as a Win32 app: one package with the agent, its installer and your config.dat, assigned to a group of devices.

What you need

The Windows package is a ZIP file containing:

File Purpose
CyberGuardDIMAgent.exe The agent, a signed Windows service.
Install-CyberGuardDimAgent.ps1 Installs or updates the service. Signed.
Uninstall-CyberGuardDimAgent.ps1 Removes the service and its files. Signed.
INSTALL-WINDOWS-IT-EN.txt Installation notes in Italian and English.
CyberGuard-DIM-Agent-Icon.png Icon for the app in Intune and Company Portal.

1. Prepare the package

  1. Extract the ZIP into an empty folder, for example C:\Packages\CyberGuardDIM.
  2. Copy your config.dat into the same folder.
  3. Open a command prompt in that folder and run:
IntuneWinAppUtil.exe -c . -s Install-CyberGuardDimAgent.ps1 -o .\output

The tool creates Install-CyberGuardDimAgent.intunewin in the output folder.

2. Create the app in Intune

In the Microsoft Intune admin center, go to Apps › Windows › Create and choose Windows app (Win32). Upload the .intunewin file.

App information

Field Value
Name Inside Technologies CyberGuard DIM Agent
Description The CyberGuard DIM agent automatically collects information about company devices (hardware, operating system, installed applications, security status) and securely sends it to the Inside Technologies CyberGuard Device Inventory Manager portal, keeping the company's IT inventory always up to date.
Publisher Inside Technologies
Logo CyberGuard-DIM-Agent-Icon.png from the package

Users see this name and description in Company Portal, so keep them as they are.

Program

Field Value
Install command powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\Install-CyberGuardDimAgent.ps1 -AgentExePath .\CyberGuardDIMAgent.exe -ConfigDatPath .\config.dat
Uninstall command powershell.exe -ExecutionPolicy Bypass -File .\Uninstall-CyberGuardDimAgent.ps1
Install behavior System

Requirements

Field Value
Operating system architecture 64-bit
Minimum operating system Your company's supported Windows version

Detection rules

Choose Manually configure detection rules and add one rule of type Registry:

Field Value
Key path HKEY_LOCAL_MACHINE\SOFTWARE\Inside Technologies\CyberGuard DIM Agent
Value name InstalledVersion
Detection method String comparison
Operator Equals
Value The agent version you are publishing, for example 1.7.17
Associated with a 32-bit app on 64-bit clients No

Use the registry rule, not a file or service rule. The installer writes InstalledVersion only after the service has started. A rule that only checks whether the file or service exists is already satisfied by an older version, so Intune would never install updates on those devices. With Associated with a 32-bit app set to Yes, Intune looks in the wrong part of the registry and reports a failure even when the agent is running.

Assignments

Assign the app as Required to the device groups that must report to Device Inventory Manager.

3. Check the installation

After Intune has installed the app:

  • In Intune, the app shows Installed for the device.
  • On the PC, the CyberGuardDimAgent service is running (Get-Service CyberGuardDimAgent).
  • In Device Inventory Manager, the device page shows the agent version and the time of the last collection. The first data arrives a few minutes after installation.

If the installation fails, the installer writes the details to:

C:\ProgramData\Inside Technologies\CyberGuard DIM Agent\logs\install.log

Collect this file before trying again or contacting support.

Updating the agent

When a new version appears in the Agent tab:

  1. Download the new Windows package and extract it into a new folder.
  2. Copy the config.dat you are already using into the folder.
  3. Create a new .intunewin file as in step 1.
  4. In Intune, open the app and replace the package file under Properties › App information.
  5. In Detection rules, change the value of InstalledVersion to the new version.

Intune then installs the update on every device where the registry still shows the old version. The installer replaces the existing service cleanly; there is no need to uninstall first.

Changing the configuration

To change the collection frequency or turn on software metering, download a new config.dat and put it in the package. The agent reads the file at every cycle, so the service does not need to be reinstalled, but the new file has to reach the devices.

Intune runs the installer again only when the detection rule is no longer satisfied, that is when the agent version changes. The simplest way is therefore to publish the new config.dat together with the next agent update, following the steps in Updating the agent.

Removing the agent

Change the assignment of the app to Uninstall. Intune runs the uninstall command, which stops and removes the service and its files.