Deploying Cortex XDR agent with intune using variables such as endpoint tags

[stig_72]

Hi all,

My client is facing issues deploying the agent with intune, the agent gets deployed as expected but additional arguments such as ENDPOINT_TAGS="blah" added to msiexec seem to be lost as they can't see them post install when browsing through endpoints in the console. Unfortunately my experience with intune is limited but perhaps any of you smart folks has used it with argument passing and it worked with no problems? Is there anything that my client might be missing? Thank you in advance!

[mavega]

Hi,

Thanks for reaching out.

Please have a look at this guide and review it, may be there is something you guys are bypassing when trying to deploy or this may just not be possible when deploying using msiexec.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.2/Cortex-XDR-Agent-Administrator-Guide/Insta...

 Regards.

[stig_72]

Hi Mavega,

Thanks for sharing but I think it's a little more nuanced than that, I'm aware of the guide, cheers mate.

I feel like perhaps quotes are being stripped or something else is going on otherwise others would have had same issues and clearly I'm the only one who seem to be having them, but thought perhaps there's a trick to that that I may be unaware of.

Either way, appreciate the suggestion.