Home Device Management Enrolling Windows Devices

Enrolling Windows Devices

Last updated on Apr 17, 2026

Enrolling Windows Devices

Deploy KyberGate on Windows devices using the KyberGate Windows Agent. The agent installs as a system service, configures proxy settings automatically, installs the root certificate, and provides persistent web filtering without requiring MDM.

Before You Begin

  • Windows 10 (version 1903+) or Windows 11
  • Administrator access on the device for installation
  • Your organization's enrollment token (found in Settings → Devices → Add Device → Windows in your dashboard)
  • .NET 6.0 Runtime or later (the installer will prompt if missing)

Installation Methods

Method 1: Manual Installation (Single Device)

  1. In your KyberGate dashboard, go to Devices → Add Device
  2. Select Windows as the platform
  3. Click Download Agent Installer to get the MSI file
  4. Copy your enrollment token from the dashboard
  5. Run the MSI installer on the Windows device
  6. When prompted, paste your enrollment token
  7. Click Install and accept the UAC prompt
  8. The agent installs, configures proxy settings, and connects automatically

Method 2: Silent Installation (Multiple Devices)

For deploying across many devices via script, Group Policy, or RMM:

msiexec /i KyberGateAgent.msi /quiet /norestart ENROLLMENT_TOKEN="your-token-here"

Via Group Policy (GPO):

  1. Copy the MSI to a network share accessible by target devices
  2. Create a new GPO → Computer Configuration → Software Installation
  3. Add the MSI package with the enrollment token parameter
  4. Link the GPO to the appropriate OU

Via RMM (ConnectWise, Datto, NinjaRMM, etc.):

  1. Upload the MSI to your RMM platform
  2. Create a deployment script using the silent install command above
  3. Deploy to your Windows device group

Method 3: Intune / Microsoft Endpoint Manager

  1. In Microsoft Intune, go to Apps → Windows → Add
  2. Select Line-of-business app and upload the MSI
  3. Set command-line arguments: ENROLLMENT_TOKEN="your-token-here"
  4. Assign the app to your device group
  5. Devices install the agent on next sync

What the Agent Does

Once installed, the KyberGate Windows Agent:

  • Configures system-wide proxy settings (PAC file)
  • Installs the KyberGate root certificate in the Windows certificate store
  • Runs as a Windows service (starts automatically on boot)
  • Reports device info, browsing activity, and health status to your dashboard
  • Updates automatically when new versions are available

Verifying Installation

  1. Check the system tray — the KyberGate icon should appear with a green indicator
  2. Right-click the icon → Status to see connection details
  3. In your dashboard, the device should appear in Devices within 2-5 minutes
  4. Visit a blocked site to verify filtering is active

Tips

  • The agent works on any network (school, home, public Wi-Fi) — filtering follows the device
  • Use the silent install method for deploying to 10+ devices
  • The agent updates itself automatically — no need to redeploy for updates
  • To uninstall: use Add/Remove Programs or msiexec /x KyberGateAgent.msi /quiet

Troubleshooting

  • UAC prompt doesn't appear: Right-click the MSI → Run as administrator
  • Agent not connecting: Check Windows Firewall isn't blocking KyberGateAgent.exe. Allow outbound connections to *.kybergate.com on ports 443 and 8080
  • Certificate not trusted: Open certmgr.msc → verify the KyberGate certificate appears under Trusted Root Certification Authorities
  • Device not appearing in dashboard: Restart the KyberGate service via services.msc or reboot the device

Related Articles