xenXDRby FluenceSecurity
Book a demo

Install on Windows

Enrol a Windows endpoint with the installer bundle for its organization.

Get the bundle

In the console, go to Settings › Agents, pick the organization, and download the installer bundle. The bundle contains the agent binaries, the install script, the ingest CA certificate and an enrolment token scoped to that organization. Treat the bundle as a secret while the token is valid.

Install

Open an elevated PowerShell in the bundle folder and run:

powershell
.\install.ps1 -GatewayUrl wss://gw.xdr.example.com/agent `
              -EnrollToken <token from the bundle> `
              -Org <organization id> `
              -LogPipe ingest.xdr.example.com:<ingest port>

The script:

  • Copies the agent to C:\Program Files\XenXDR and creates its data folder under C:\ProgramData\XenXDR.
  • Installs the ingest CA certificate so telemetry travels over TLS.
  • Applies the organization's fleet policy for telemetry collection.
  • Registers the XenXDRAgent service to start automatically and starts it.

Verify

  • The service shows as running: Get-Service XenXDRAgent.
  • The host appears on the Hosts page within a minute, with status online and the tier it was assigned.
  • Events from the host appear on the Logs page: filter by host.name.

Fleet rollout

For many machines, deploy the bundle with your existing tooling (Intune, SCCM, GPO startup scripts, RMM). The install script is idempotent: re-running it upgrades the agent in place and keeps the enrolled identity.

Uninstall

powershell
.\uninstall.ps1            # removes the service and program files, keeps data
.\uninstall.ps1 -PurgeData # also removes C:\ProgramData\XenXDR

Fleet policy can require an uninstall token, so removing the agent takes the console's consent. See Installer bundles.