Enterprise deployment

A light web installer

One small setup file for 64-bit Windows 7 SP1 to Windows 11. It downloads the rest while it installs, so nobody has to pick a build for each machine. The file carries your organisation's name, and its deployment link enrols the machine into your workspace with nothing to type.

• One link serves a whole rollout, bounded by an expiry date, a usage cap and revocation
• A setup file saved and run after a newer release has shipped stops working — download it again

MSI for Group Policy, Intune and Configuration Manager

A 64-bit MSI package installs silently, per machine. Pass your deployment link's token as a property and the machine enrols on first start:

msiexec /i Telvory-Agent-<version>-x64.msi /qn ENROLL_TOKEN=<token>

• Group Policy: assign the package to computers, with a transform (.mst) that carries the token
• Intune: upload it as a line-of-business app with the token on the install command line
• Configuration Manager and other tools: deploy it with the silent command above
• Golden images: set START_SERVICE=0 to install without starting the service before you seal the image

Consent recorded at install

When an administrator deploys the agent, the consent is recorded against that deployment: who authorised it, when, and for which capabilities. The consent register shows each machine's record and lets you withdraw it.

Controls for the fleet

Decide how technicians reach your machines:

• A connection policy that decides whether to connect directly or ask the person at the machine first
• Secure Connect: a fresh MFA check before any unattended connection, with exemptions for chosen groups
• Idle unattended sessions ended automatically after 5 to 120 minutes
• The agent runs as a service that resists being stopped, and uninstalling needs your workspace's authorisation

Linux

A Linux agent, packaged as .deb and .rpm with a systemd service, enrols the same way and reports presence, inventory and 11 read-only diagnostics, relays wake-on-LAN, and uninstalls when an admin authorises it. It does not share its screen or take remote control.