Mass Deployment

Mass deploy We360.ai agent via GPO, Intune, MDM, SCCM, and MSI — scalable employee monitoring software rollout for enterprises.

This section covers methods for deploying MyZen across many machines without direct physical access. Choose the method that fits your infrastructure.

Deployment Methods

Method	Platform	Stealth Support	Guide
Command Line (MSI)	Windows	Yes	Command Line / MSI
Active Directory Group Policy	Windows	Yes	AD GPO Deployment
Microsoft Intune (Windows)	Windows	Yes	Intune Deployment
Microsoft Intune (macOS)	macOS	Yes	Microsoft Intune (macOS)
MDM Tools (JAMF, Addigy, etc.)	macOS	Partial	macOS MDM Deployment · MDM overview and platform guides
Direct Link (Employee Self-Install)	Windows, macOS	No	Direct Link

Key Notes

• Do not rename installer files. The filename contains encoded organization configuration. Renaming prevents proper installation.

• Stealth mode on macOS via MDM: MDM tools can install the agent but cannot automatically grant Accessibility and Screen Recording permissions. The end user must approve these manually.

• More than one way to reach a domain machine. Beyond assigning the MSI, a domain-joined estate can be covered with a computer startup script, a Group Policy Immediate Task (no reboot), or direct PowerShell remoting. See AD GPO Deployment for the trade-offs and caveats of each.

• Automatic updates: Once installed, MyZen updates itself. No post-deployment update action is needed.