PDQ Deploy¶

Roll the SentriKat Windows Agent out to your fleet with PDQ Deploy. The agent is a PowerShell script installed via a one-line command, PDQ just runs that command on every target.

Prerequisites¶

• PDQ Deploy (Free or Pro)
• The agent script sentrikat-agent-windows.ps1 (download it once from Agents → Agent Keys in SentriKat)
• An install token from SentriKat (Agents → Agent Keys → Mass / automated deploy → Create Install Token). Each machine exchanges the token once for its own per-host key on first run; you can revoke the token at any time without touching enrolled machines.
• Network access from targets to your SentriKat instance (HTTPS)

Setup¶

Step 1: Stage the script¶

Place sentrikat-agent-windows.ps1 on a network share or in your PDQ repository.

Step 2: Create the PDQ package¶

1. New Package → add an Install step
2. Install File: sentrikat-agent-windows.ps1
3. PDQ runs PowerShell scripts with its own runner; make sure the command line is equivalent to:

powershell -ExecutionPolicy Bypass -File sentrikat-agent-windows.ps1 -Install `
  -ServerUrl "https://sentrikat.company.com" -EnrollToken "<YOUR_INSTALL_TOKEN>"

1. (Optional) add a verification step:

if (-not (Get-ScheduledTask "SentriKat Agent" -ErrorAction SilentlyContinue)) {
    throw "SentriKat Agent scheduled task not found"
}

Step 3: Deploy¶

Select targets (AD OU, PDQ Inventory collection, or a manual list) and Deploy Once or schedule it. Re-running the package on an already-enrolled machine is safe. The agent keeps its existing per-host key.

After the rollout¶

• Machines appear in SentriKat under Inventory → Endpoints as they enroll
• Revoke the install token in SentriKat once the rollout is done (enrolled agents are unaffected. They already hold per-host keys)
• Default scan interval is 4 hours (-IntervalMinutes to change)

Options you may want in the package command¶