SCCM / Intune Integration¶
Deploy SentriKat agents at scale using Microsoft Endpoint Configuration Manager (SCCM/MECM) or Microsoft Intune.
SCCM Deployment¶
Prerequisites¶
- SCCM/MECM infrastructure
- SentriKat Windows Agent MSI installer
- Distribution points configured
Create an Application¶
- Open the Configuration Manager Console
- Go to Software Library > Application Management > Applications
- Click Create Application
- Select Manually specify the application information
- Fill in:
- Name: SentriKat Agent
- Publisher: SentriKat
- Software version: (match agent version)
- Add a Deployment Type:
- Type: Windows Installer (MSI)
- Content location: Path to
sentrikat-agent.msi - Installation program:
- Uninstall program:
- Set Detection Method:
- Type: Registry
- Path:
HKLM\SOFTWARE\SentriKat\Agent - Value:
Version - Operator: Exists
- Distribute content to your distribution points
- Deploy to a device collection
Deploy to Collection¶
- Right-click the application > Deploy
- Select target Device Collection
- Set Purpose: Required (automatic) or Available (user-initiated)
- Configure schedule
- Click Next through remaining steps and Close
Intune Deployment¶
Prerequisites¶
- Microsoft Intune with Entra ID (Azure AD)
- SentriKat Agent MSI or wrapped as
.intunewin - Devices enrolled in Intune
Option 1: Line-of-Business App (MSI)¶
- Go to Microsoft Intune admin center
- Navigate to Apps > All apps > Add
- Select Line-of-business app
- Upload
sentrikat-agent.msi - Configure:
- Command-line arguments:
- Assign to a device group
- Click Create
Option 2: Win32 App (intunewin)¶
For more control, wrap the MSI using the Microsoft Win32 Content Prep Tool:
Then in Intune:
- Apps > Add > Windows app (Win32)
- Upload the
.intunewinfile - Install command:
- Uninstall command:
- Detection rules:
- Rule type: Registry
- Path:
HKLM\SOFTWARE\SentriKat\Agent - Value:
Version - Detection method: Value exists
- Requirements: Windows 10 1809+, 64-bit
- Assign to a device group
Upgrading Agents¶
SCCM¶
- Update the application with the new MSI version
- Redistribute content
- Create a new deployment or use Supersedence to replace the old version
Intune¶
- Upload the new MSI/intunewin as a new app version
- Set supersedence on the previous version
- Intune handles rollout to devices at next check-in
Compliance Reporting¶
SCCM¶
Monitor deployment status:
- Go to Monitoring > Deployments
- Find SentriKat Agent deployment
- View success/failure counts and per-device status
Intune¶
Monitor installation:
- Go to Apps > Monitor > App install status
- Select SentriKat Agent
- View device install status breakdown
Troubleshooting¶
SCCM: Content Not Available¶
- Verify content is distributed to the client's distribution point
- Check
CAS.logandContentTransferManager.logon the client
Intune: App Stuck in "Installing"¶
- Check the Intune Management Extension logs on the device:
C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.log - Ensure the device has internet access to download the app
Agent Installed but Not Reporting¶
- Verify network access to SentriKat instance
- Check API key validity in Integrations > Agent Keys
- Review agent logs:
C:\ProgramData\SentriKat\agent.log
Next Steps¶
- Windows Agent for agent configuration details
- PDQ Deploy for smaller Windows networks
- Agent overview for agent monitoring