Skip to main content
All CollectionsSentinelOne & GuardzManaged SentinelOne (Ultimate Plan)
Deploying SentinelOne via Guardz: Best Practices & Installation Guide
Deploying SentinelOne via Guardz: Best Practices & Installation Guide
Updated over 2 weeks ago

πŸš€ Deploying SentinelOne via Guardz: Best Practices & Installation Guide

πŸ“Œ Introduction

Deploying SentinelOne through Guardz is slightly different from deploying it directly from the SentinelOne Console. Guardz simplifies the process by providing:

βœ… Pre-configured installation packages for different OS types.
βœ… Deployment scripts for mass rollout via MDM/RMM tools.
βœ… Guidance on installation & troubleshooting per OS.

πŸ’‘ Before deploying, it's important to choose the right package and install method based on your environment.


πŸ“Œ Step 1: Choosing the Right Installation Method

SentinelOne offers two primary installation methods:

1️⃣ Installer-based deployment (EXE, MSI, PKG, RPM)
2️⃣ Script-based deployment (MDM, RMM, GPO, Intune, SCCM)

πŸ“Œ Which method should you choose?

Scenario

Recommended Method

Small-scale deployment

Installer-based (EXE, MSI, PKG, RPM)

Large-scale rollout (100+ devices)

Script-based (MDM, RMM, GPO, SCCM, Intune)

Remote installation

Script-based (MDM, RMM)

Multi-OS environment

Combination of both methods

πŸš€ Mass deployment via script is recommended for large organizations.


πŸ“Œ Step 2: Downloading Installation Packages & Scripts

Guardz provides pre-configured SentinelOne installation packages along with deployment scripts that work out-of-the-box.

πŸ”Ή How to Get the Installation Files

1️⃣ Log into Guardz.
2️⃣ Navigate to Security Controls > Endpoint Security > SentinelOne Managed.
3️⃣ Click "Deploy" to enable the SentinelOne integration.
4️⃣ Select the appropriate OS and architecture (Windows, macOS, Linux).
5️⃣ Download the installer package or deployment script.


πŸ“Œ Step 3: Deploying SentinelOne Using Mass Deployment Scripts

πŸ’‘ Why Use Deployment Scripts?

πŸ“Œ Script-based deployment is recommended for MDM, RMM, and remote installation across multiple devices.

βœ… Guardz provides pre-built scripts with all necessary variables included.

πŸ“Œ Deployment best practices:

  • Group devices by OS/Architecture/Version before running mass deployments.

  • Use MDM/RMM tools (Intune, Jamf, SCCM, GPO) for script execution.

  • Ensure devices have the correct permissions applied before deployment (e.g., Full Disk Access for macOS).

🚨 Disclaimer: The provided scripts are for guidance only and should be tested in a non-production environment before deployment.


πŸ“Œ Step 4: Deploying SentinelOne Per OS

πŸ”Ή Windows Deployment (EXE/MSI or Script)

Option 1: Installer Deployment (EXE/MSI)

1️⃣ Download the MSI package from Guardz.
2️⃣ Open Command Prompt (Admin) and run:

msiexec /i SentinelOneInstaller.msi /qn /norestart

3️⃣ Verify the agent installation in Control Panel > Programs.


Option 2: Script Deployment via MDM/RMM

1️⃣ Deploy the Windows script via GPO, Intune, or SCCM.
2️⃣ Ensure Windows Defender policies are properly configured.
3️⃣ Verify that the SentinelOne agent appears in Guardz > Devices.


πŸ”Ή macOS Deployment (PKG or Script)

Option 1: Installer Deployment (PKG)

1️⃣ Download the PKG file from Guardz.
2️⃣ Open Terminal and run:

sudo installer -pkg SentinelOneInstaller.pkg -target /

3️⃣ Grant Full Disk Access permissions to SentinelOne.


Option 2: Script Deployment via MDM (Jamf, Intune)

1️⃣ Deploy the macOS script via MDM (Intune, Jamf).
2️⃣ Ensure Full Disk Access and System Extension Approval are enabled.
3️⃣ Confirm the SentinelOne agent is running via:

sudo launchctl list | grep sentinelone

πŸ”Ή Linux Deployment (RPM/DEB or Script)

Option 1: Installer Deployment (RPM/DEB)

1️⃣ Download the Linux package (RPM or DEB).
2️⃣ Open Terminal and install:

sudo dpkg -i SentinelOneInstaller.deb # For Debian-based systems sudo rpm -i SentinelOneInstaller.rpm # For RHEL-based systems

3️⃣ Confirm the installation via:

systemctl status sentinelone


Option 2: Script Deployment via SSH or Automation Tool

1️⃣ Deploy the Linux script via Ansible, Puppet, or SSH-based automation.
2️⃣ Ensure the agent registers with Guardz successfully.


πŸ“Œ Step 5: Post-Deployment Configuration

πŸ”Ή Verify Device Enrollment in Guardz

After installing SentinelOne:
1️⃣ Log into Guardz.
2️⃣ Navigate to Security Controls > Endpoint Security > Devices.
3️⃣ Check that all endpoints report correctly in Guardz.
​

πŸ”Ή Adjust SentinelOne Security Policies

1️⃣ Navigate to Security Controls > Endpoint Security > SentinelOne Managed.
2️⃣ Click the edit icon to modify SentinelOne Policy Settings.
3️⃣ If required, override the global policy settings per customer.
​

πŸš€ Your SentinelOne agents are now fully deployed & managed via Guardz!


πŸ“Œ Troubleshooting Deployment Issues

πŸ”Ή Issue: "Installer Failed to Execute"
βœ… Fix:

  • Verify the installer matches the OS architecture (32-bit vs. 64-bit).

  • Run the installer as Administrator (Windows) or with sudo (macOS/Linux).

πŸ”Ή Issue: "SentinelOne Agent Not Appearing in Guardz"
βœ… Fix:

  • Ensure the agent is installed correctly on the endpoint.

  • Verify that the correct Site Token was used during installation.

πŸ”Ή Issue: "macOS Agent Does Not Have Full Disk Access"
βœ… Fix:

  • Deploy an MDM profile that grants Full Disk Access to SentinelOne.

πŸ”Ή Issue: "Linux Agent Not Running After Installation"
βœ… Fix:

  • Run:

    systemctl restart sentinelone
  • Verify SentinelOne logs for errors.


πŸ“Œ Best Practices for SentinelOne Deployment

βœ” Test deployment in a small group before mass rollout.
βœ” Use script-based deployment for large-scale installations.
βœ” Ensure required permissions (e.g., Full Disk Access for macOS) are applied.
βœ” Monitor Guardz > Devices to ensure proper agent enrollment.


Did this answer your question?