topic Re: Deploying Cortex XDR agent with intune using variables such as endpoint tags in Cortex XDR Discussions

Deploying Cortex XDR agent with intune using variables such as endpoint tags

stig_72 — Fri, 12 Jan 2024 11:11:03 GMT

Hi all,

My client is facing issues deploying the agent with intune, the agent gets deployed as expected but additional arguments such as ENDPOINT_TAGS="blah" added to msiexec seem to be lost as they can't see them post install when browsing through endpoints in the console. Unfortunately my experience with intune is limited but perhaps any of you smart folks has used it with argument passing and it worked with no problems? Is there anything that my client might be missing? Thank you in advance!

Re: Deploying Cortex XDR agent with intune using variables such as endpoint tags

mavega — Fri, 12 Jan 2024 21:50:21 GMT

Hi,

Thanks for reaching out.

Please have a look at this guide and review it, may be there is something you guys are bypassing when trying to deploy or this may just not be possible when deploying using msiexec.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.2/Cortex-XDR-Agent-Administrator-Guide/Install-the-Cortex-XDR-Agent-for-Windows

Regards.

Re: Deploying Cortex XDR agent with intune using variables such as endpoint tags

stig_72 — Mon, 15 Jan 2024 10:03:52 GMT

Hi Mavega,

Thanks for sharing but I think it's a little more nuanced than that, I'm aware of the guide, cheers mate.

I feel like perhaps quotes are being stripped or something else is going on otherwise others would have had same issues and clearly I'm the only one who seem to be having them, but thought perhaps there's a trick to that that I may be unaware of.

Either way, appreciate the suggestion.