Deploy the Agent via Intune

This guide walks you through deploying the ActivTrak agent to both Windows and macOS devices using Microsoft Intune/Endpoint Manager.

Contents

• Before you begin
• Windows OS deployment
• macOS deployment

Before you begin

Important: Do not rename the installation files downloaded from ActivTrak. The installers will not work if renamed.

For macOS deployments: Set up required policies before pushing the agent to prevent permission pop-ups on end-user computers.

Windows OS deployment

Prepare the Windows Agent

The ActivTrak Windows agent must be converted from .MSI format to .intunewin format using the Microsoft Win32 Content Prep Tool.

1. Download your organization's ActivTrak Windows MSI installation file from the ActivTrak app
2. Download the IntuneWinAppUtil.exe file from the Microsoft Win32 Content Prep Tool GitHub
3. Run the utility using Windows command prompt or PowerShell:

IntuneWinAppUtil -c <setup_folder> -s <source_setup_file> -o <output_folder> <-q>

Where:

• -c points to the folder containing the MSI file
• -s points to the name of your organization's ActivTrak .MSI file itself (not including the folder path)
• -o is the name of the output folder where the converted .intunewin file will be created

For more information on command-line parameters, see the readme file in the Microsoft Win32 Content Prep Tool GitHub.

Deploy the Windows Agent

1. Log in to Microsoft Endpoint Manager and navigate to Apps
2. Click Apps > All Apps > + Add
3. Under App Type, select Win32 App
4. Upload the newly created .intunewin package under Select app package file

5. Under App Information:

• The only required change is to provide a Publisher name. We suggest using "ActivTrak"

6. Under Program:

• No changes are required, but evaluate the commands and Device restart behavior to ensure they align with your expectations
• If you wish to deploy the agent silently, use a /q or -q flag in the command-line and hide all Toast notifications (see Step 7 in Microsoft's Win32 app availability documentation)

7. Under Requirements:

• Provide Operating System Architecture and Minimum Operating System information to match your organization's device needs

8. Under Detection Rules:

• Select Manually Configure Detection Rules > +Add > File

• Enter the following information:

  Path: C:\Windows\SysWOW64

  File: SVCTCOM.exe

  Detection Method: File or Folder Exists

9. Optional: To specify a minimum version of the ActivTrak agent:

• Path: C:\Windows\SysWOW64
• File: SVCTCOM.exe
• Detection Method: String (Version)
• Operator: Greater than or equal to
• Value: 8.3.4.0 (or replace with the current version of the Agent you're deploying)

10. Under Dependencies and Supersedence:

• You're not required to provide any information, but review these sections to match your organization's policy and requirements

11. Under Assignments:

• Add groups/devices that you want this app rolled out to

12. Review and click Create to complete deployment

macOS deployment

Create Configuration Profiles for Permissions

You'll need to create two configuration profiles to grant the ActivTrak agent the necessary permissions to function. Remember to refer to the Microsoft Documentation as needed: Restrict devices features using policy in Microsoft Intune.

1. Sign in to the Microsoft Intune admin center
2. Select Devices > macOS > Configuration profiles > Create

3. Select macOS as the platform, Templates as the profile type, then Custom

4. Name the profile (you can use any name) and click Next

5. On the configuration settings page:

• Configuration profile name: Choose any descriptive name
• Deployment channel: Device
• Upload PPPC: Download and upload one of these profiles:
  • Profile to grant/deny needed permissions
  • Profile to disable background notifications

Note: You'll need to create two separate configuration policies by repeating these steps twice—once for each PPPC profile. Some customers may not want to disable all background notifications, so we've kept these profiles separate for transparency.

6. After uploading a PPPC, you'll see a preview of the code in the box below.

7. Click Next and assign the policy to all devices or specific groups as needed

8. Review your selections and click Save

For more information on role-based access control and scope tags, see Microsoft's RBAC documentation.

Deploy the macOS Agent

1. Navigate to Microsoft Intune admin center
2. Select All Apps > Add

3. Select Other > Line of Business App > Select
4. Select the agent PKG downloaded from app.activtrak.com
5. Under App Information (this should pre-populate):

• Name: Keep unchanged
• Description: Can be changed
• Publisher: ActivTrak
• Minimum operating System: macOS 10.14 (as of June 30, 2023)
• Install as Managed: Keep unchanged as "No." 
• App bundleID: Should auto-populate as com.bgrove.scthost. If it doesn't, enter this manually
• All other settings are optional

6. Click Next
7. Under Assignments:

• It's important to use devices, not users
• The easiest option is to click Add all devices

8. Continue to Review + Create, and if everything looks correct, click Create

The agent will now start to distribute as devices check in. This can take up to 48 hours, depending on user activity and check-in policies.

Need Help?

Please feel free to contact ActivTrak Support via chat or email support@activtrak.com if you need any more help.