Deploy the Desktop Agent via Microsoft Intune (Windows)

Microsoft Intune can push the Zeuslock desktop agent to all your managed Windows devices using the same installer and configuration the Agents page provides.

Prerequisites

• Windows 10/11 or Windows Server 2016+.
• Devices enrolled in Microsoft Intune, with admin rights to deploy apps.
• Network access to your Zeuslock API URL.
• An organization API key (create one on the API Keys page).

Step 1 — Get the installer and your settings

On the Agents page → Deployment → Windows → View instructions, download zeus-agent-windows.msi. Copy your exact configuration from the Configuration (config.json) box — it looks like this:

{
  "api_url": "https://api.zeuslock.ai",
  "api_key": "YOUR_API_KEY",
  "monitor_clipboard": true,
  "monitor_ai_apps": true,
  "show_notifications": true
}

Step 2 — Add the agent to Intune

In the Microsoft Intune admin center → Apps → Windows → Add, choose an app type:

• Line-of-business app — for the plain MSI, or
• Windows app (Win32) — after wrapping the MSI with the Microsoft Win32 Content Prep Tool, for more control over the install command and detection rules.

Upload zeus-agent-windows.msi.

Step 3 — Set the install command with your settings

Use the silent install command so the agent registers itself with your organization:

msiexec /i zeus-agent-windows.msi /quiet /norestart API_URL="https://api.zeuslock.ai" API_KEY="YOUR_API_KEY"

For a Win32 app, set this as the Install command; for an LOB MSI, pass API_URL and API_KEY as MSI properties.

Step 4 — (Optional) push the config file

If you prefer the file approach, deliver config.json to C:\ProgramData\Zeus\ via an Intune configuration or PowerShell script, using the values from Step 1.

Step 5 — Assign

Assign the app as Required to your Windows device groups. Intune installs it at the next device sync.

Verify

On the Agents page, the machine appears under Installed agents (Hostname, Platform, Version, Status, Last seen) and the Online count goes up.

Copy the exact api_url and api_key from the Configuration box on your Agents page. Never share your API key publicly.