Deployment
Installing on a single machine
For machines your RMM can't reach: one file, double-click, done, nothing to type, no key.
When to use this
Bench machines, demo laptops, home workers: anywhere a file beats a script; for a fleet, the wrapper script.
Get the installer
- Tenants → <customer> → Install agents.
- Manual install card → Download installer.
You get SnitchOS_<code>.exe. Advanced options add a label, cap, or expiry; default: neither.
Run it on the machine
Double-click, approve the prompt, it elevates itself, no arguments, no key. Appears on the tenant overview in about 60 seconds.
Do not rename the file
Identity is the code in the filename, rename it and it won't install. Browser suffixes (… (1).exe, … - Copy.exe) are fine; nothing else is.
The wrapper script is the opposite: identity is inside the file, rename it freely.
Reuse and revoke
Keep the file: it works at that customer until revoked, capped, or expired. Download more anytime, each revocable, older copies still work.
Install agents → Downloaded installers lists each: install count, last use, expiry, a Revoke button. Revoking is immediate; enrolled machines are unaffected, authenticating with their own device credential.
Which credential is which
Three things get called "the key", behaving differently:
| Credential | Where it lives | Reuse and lifetime |
|---|---|---|
| Installer code | In the SnitchOS_<code>.exe filename | Reusable across machines. No cap or expiry unless you set one |
| Enrollment grant | Minted on the machine each time the installer runs | Single use, one machine, expires in minutes |
| Fleet key | Inside the RMM wrapper script | Unlimited uses, five-year expiry, revocable |
A one-off, single-use, short-expiry key can also be minted for a manual msiexec run, see deployment guide.
If nothing shows up
Run & "C:\Program Files\SnitchOS\SnitchOS.HealthCheck.ps1" on the endpoint; confirm it reaches api.snitchos.com and cdn.snitchos.com over HTTPS. More in troubleshooting.
Removing it
The agent is not listed in Settings → Apps or Programs and Features, so remove it from an elevated prompt with msiexec /x "{<product-code>}" /qn, see the deployment guide. Data stays until retention removal.