Objective:
Install Windows Agents with non-default options, such as without an immediate restart. You can use an EXE or MSI. Use an MSI package to install with an external deployment system (such as SSCM or GPO).
Prerequisites:
The installation requires a user role with Administrator permissions.
Download the latest Windows Installer package.
Get the Token of the Site to which the Agent will belong.
Notes:
Options are case-insensitive.
For easier upgrades, you can configure deployment options from the Agent Configuration Settings in the policy.
If you install a Windows Agent with the command line (EXE or MSI) and then upgrade from the Management Console, the upgrade configuration is according to the policy to which the Agent belongs. The command-line options in this article are not persistent.
Exit (return) codes for MSI:
From the same CMD or shell session that the installer was launched, run: echo %ErrorLevel%
0 = Success, reboot required
1 = Success, reboot required
3010: Success, reboot required
1603 = Failure
Exit (return) codes for EXE:
From the same CMD or shell session that the installer was launched, run: echo %ErrorLevel%
0 = Success
-1 (or other non-zero) = Failure
1663 = Failure, unsupported platform
EXE Installer Options
Note: The new installation package (SentinelOneInstaller.exe), uses an EXE wrapper for the MSI installer. Therefore, if you want to use installer arguments with SentinelOneInstaller.exe, you must use MSI arguments, not EXE arguments.
Action and Description | Option |
Silent installation (no UI, no user interaction, no reboot). | /q, /QUIET, /s, /SILENT |
With a Silent installation switch, you can use an optional flag for endpoint reboot: |
|
Install the Agent without an automatic reboot. Use for mass deployment when you send a message to users to restart their computers at the end of the day, or if you have a reboot scheduled for a specified time. | /NORESTART |
Always automatically reboot the endpoint after Agent installation. | /FORCERESTART |
Install the Agent with an automatic reboot, if required. | /REBOOT |
Install the Agent with the UI disabled (no tray icon or notifications). | /NOUI |
Disable Agent logging. | /NOLOGGING |
Assign Agents to a Site or Group. | /SITE_TOKEN=string |
Customize the path for Agent database, logs, and large data files.
Requirements
(Supported from Agent versions 3.6) | /INSTALL_PATH_DATA=drive:\path |
Set a proxy server between the Agent and its Management.
Mode valid values:
| /SERVER_PROXY=mode |
Set credentials to authenticate with the Management proxy. | /SERVER_PROXY_CREDENTIALS=user:pass |
Set a proxy server between the Agent and the Deep Visibility™ EDR data server.
Mode valid values:
| /IOC_PROXY=mode |
Set credentials to authenticate with the Deep Visibility™ proxy. | /IOC_PROXY_CREDENTIALS=”username:password” |
Prevent fallback to direct communication if the proxy is not available. Important! If the Management proxy or the Deep Visibility™ proxy is configured with | /FORCE_PROXY |
Set the Agent installation to disable or not disable Windows Defender.
| WSC={true | false} or /WSCOFF |
Add a user-defined Identifier string to the endpoint. | /CUSTOMER_ID="Customer Identifier string" |
Install on Virtual Desktop Infrastructure or VMs with a Golden (Master) Image. Important: This property is NOT recommended for all VM installation types. See Installing Windows Agents on VM or VDI for when this property is recommended. | /VDI |
MSI Installer Options
Action and Description | Option |
Silent installation (no UI, no user interaction, no reboot). | /q, /QUIET |
With a Silent installation switch, you can use an optional flag for endpoint reboot:
| /NORESTART /FORCERESTART |
Install the Agent with the UI disabled (no tray icon or notifications). | UI={true | false} |
Disable Agent logging. | AGENT_LOGGING={true | false} |
Assign Agents to a Site or Group. | SITE_TOKEN=string |
Customize the path for Agent database, logs, and large data files.
Requirements
(Supported from Agent versions 3.6) | INSTALL_PATH_DATA="drive:\path" |
Set a proxy server between the Agent and its Management.
Mode valid values:
| SERVER_PROXY=mode |
Set credentials to authenticate with the Management proxy. | SERVER_PROXY_CREDENTIALS=user:pass |
Set a proxy server between the Agent and the Deep Visibility™ EDR data server.
Mode valid values:
| IOC_PROXY=mode |
Set credentials to authenticate with the Deep Visibility™ proxy. | IOC_PROXY_CREDENTIALS=username:password |
Prevent fallback to direct communication if the proxy is not available. Important! If the Management proxy or the Deep Visibility™ proxy is configured with | FORCE_PROXY={true | false} |
Set the Agent installation to disable (true) or not disable (false) Windows Defender.
| WSC={true | false} |
Add a user-defined Identifier string to the endpoint. | CUSTOMER_ID="Customer Identifier string" |
Install on Virtual Desktop Infrastructure or VMs with a Golden (Master) Image. Important: This property is NOT recommended for all VM installation types. See Installing Windows Agents on VM or VDI for when this property is recommended. | VDI={true | false} |