Skip to content
Home » How to Deploy and Provision the Telemetry Agent for Windows Silently and Remotely

How to Deploy and Provision the Telemetry Agent for Windows Silently and Remotely

This document guides the enterprise admin of a Microsoft customer tenant through the typical process of silently deploying and provisioning the Tweelin Telemetry Agent for Windows, without any end user involvement.

The process outlined in this document may vary based on your organization configuration and tools.

Before you start...

  1. Make sure you are a Microsoft 365/Entra/Intune administrator.
  2. Make sure you have a Microsoft Intune Manager license. Go to intune.microsoft.com to verify.
  3. Download the Tweelin Windows Telemetry Agent X64 package which supports auto-provisioning via Intune (extension .intunewin).
    Or,
    If you are deploying the Tweelin Windows Telemetry Agent on an ARM machine, Download the ARM version.

Summary: Perform 2 Macro Phases

  1. Create an App to query the Entra API

  2. Deploy the Tweelin Telemetry Agent on all the desired devices via Intune

PHASE 1- Create an App to query the Entra API

In order to allow for auto provisioning, it is necessary to create an app that will allow the Tweelin telemetry agent to query the Entra API and obtain the user email address needed for the auto-provisioning.

STEP 1 – Log into the Microsoft Entra admin center

STEP 2 – Navigate to App registrations → New registration

STEP 3 – Specify the application properties

  • Type your preferred application name.
  • In the “Supported account types” section, choose the option Accounts in this organizational directory only (Single tenant).
  • Click Register.

STEP 4 – Go to Certificates & secrets

STEP 5 – Add a new client secret

  • In the Client secrets tab, click New client secret.
  • Add a description and click on Add.
  • Take note of the secret Value, as you will need it later.

STEP 6 – Add the required API permissions

  • Go to API Permissions.
  • Click on + Add a permission.
  • Select Microsoft Graph.
  • As permission type, select Application permissions.
  • Search the User.Read.All permission in the search box.
  • Select the User.Read.All search result.
  • Click on Add permissions.
  • After adding the required permissions, please, make sure both User.Read and User.Read.All are granted.

STEP 7 – Take note of Application (client) ID and Directory (tenant) ID

  • Copy both Application (client) ID and Directory (tenant) ID, as you will need them later.

PHASE 2- Deploy the Tweelin Windows Telemetry Agent

STEP 1 – Log into Microsoft Intune admin center

STEP 2 – Navigate to Apps → Windows apps → Create

STEP 3 – As app type, select “Windows app (Win32)”

STEP 4 – Select the app package file with “.intunewin” extension, that you have previously downloaded

If you haven’t downloaded it yet, you can find the X64 version here, or the ARM version here.

STEP 5 – Complete the App information by adding “Tweelin Inc.” as publisher

STEP 6 – Edit the install command and delete reboot codes

  • Add the install command that includes your Tenant ID, Client ID and Client Secret you have previously saved. Edit the command below by replacing the blue sub-strings with your previously stored values, then paste the entire string in the Install command field:
      • msiexec /i “Telemetry Agent-1.2.4.12377.msi” /qn TENANT_ID=”[paste your Tenant ID]” CLIENT_ID=”[paste your Client ID]” CLIENT_SECRET=”[paste your Client Secret]“
      • Please make sure that the [orange-filename].msi corresponds to the actual filename and version of the Tweelin Telemetry Agent that you are distributing.
  • Set the “Device restart behavior” as No specific action.
  • Remove both hard and soft reboot codes, as the Tweelin Telemetry Agent doesn’t require any reboot.
  • Click Next.

STEP 7 – Configure App requirements

  • Select the right 64-bit Operating system architecture by clicking “Yes” in the “Check operating system architecture” section, then checking the destination machine architecture box(es).
  • Select Windows 10 20H2 as Minimum operating system.
  • Move to the Next step.

STEP 8 – Create a Detection rule

  • Select Manually configure detection rules as Rules format.
  • Click + Add to add the detection rule.
  • Select Registry as Rule type
Specify the Detection rule values
  • Key path: “Computer\HKEY_CURRENT_USER\Software\Tweelin Inc.\Telemetry Agent”.
  • Value name: “RunOnce”.
  • Detection method: “Value exists”.

STEP 9 – Skip Dependencies

STEP 10 – Skip Supersedence

STEP 11 – Assign the App to groups, as you see fit

STEP 12 – Review and create

STEP 13 – Track the deployment progress

  • At this point, Intune will proceed with remotely and silently installing and provisioning the Tweelin Telemetry Agent for the selected users.
  • In case of auto-provisioning failure, the end user will be invited to register his/her email manually through an OTP flow.
Example of a successful deployment

NEXT STEP: Go back to the Enterprise Deployment Guide

Tags: