RMM Deployment
This page will outline the various ways that you can deploy Check to Windows devices
Review the below options for how to deploy Check to Windows devices via RMM. If you use a RMM not featured, please see the script in PowerShell to script the install.
Action1
For Action1, you can use the script in PowerShell to create a ps1 file and deploy it via a custom package in the software repository or via the script library.
Acronis RMM
For Acronis RMM, you can use the script in PowerShell to create a script in the Script repository and then running the script via a Script Plan.
ConnectWise Automate
Go to Automation → Scripts → Script Manager
Create a new script
Add a PowerShell Execute Script step
Copy in the PowerShell script.
Save and assign the script to your targetted devices.
Datto RMM
Go to Automation → Components
Create a new Custom Component
Copy in the PowerShell script
Save and publish the component
Navigate to Automation → Jobs → Create Job
Name the job Check Browser Extension Deployment
Add the custom component you just created
Target your selected device(s)
Schedule the job
ImmyBot
ImmyBot includes a pre-built Global Computer Task for Check browser extension deployment. Due to how flexible Immy is, this may look intimidating at first, but it is quite easy and nearly purely UI-driven! Follow these steps to deploy Check using ImmyBot:
Step 1: Create a Deployment
Navigate to Deployments in the left menu
Click New to create a deployment
Select the Global Task: Choose "Check by CyberDrain" from the available global tasks
Configure Enforcement Type:
Required: Automatically applies during maintenance sessions
Onboarding: Applied only during computer onboarding
Ad Hoc: Run only when explicitly triggered
Select Targets:
Cross Tenant: Apply to all computers across all tenants
Single Tenant: Apply to computers in a specific tenant
Individual: Target specific computers or users
Use filters, tags, or integration-specific targeting as needed
Step 2: Customize Parameters
Configure Task Parameters to customize the deployment for your environment:
Set company branding options (company name, logo URL, primary color)
Configure CIPP reporting settings (server URL, tenant ID)
Adjust notification and blocking preferences
Set custom detection rules URL if needed
Set Dependencies if required (e.g., ensure Windows updates are applied first)
Configure Scheduling if using time-based deployment
Step 3: Deploy and Monitor
Click Create to save the deployment
Run a Maintenance Session to apply the deployment:
Navigate to the target computers
Initiate maintenance session to execute deployments
Monitor Results through ImmyBot's maintenance session logs
Review deployment status and address any failures
Best Practices for ImmyBot Deployment
Test First: Create a test deployment targeting a small group before rolling out globally
Use Targeting: Leverage Immy's advanced targeting to deploy based on computer properties, user assignments, or custom criteria
Monitor Compliance: Set up recurring maintenance sessions to ensure Check remains installed and properly configured
Handle Exceptions: Create separate deployments for customers requiring different configurations
For detailed information about Immy deployments, tasks, and maintenance sessions, refer to the ImmyBot Documentation.
Kaseya VSA
Go to Agent Procedures → Installer Wizards → Application Deploy
Upload a .ps1 of the PowerShell script
Choose Private or Shared Files
Select installer type
Add command-line options
Name the procedure Check Browser Extension Deployment
Save and schedule the script for deployment
ManageEngine Endpoint Central
Navigate to Manage → Extension Repository
Click Add Extensions and click the desired browser
Select the Web Store Extension Type
Enter the extension ID:
Chrome: benimdeioplgkhanklclahllklceahbe
Edge: knepjpocdagponkonnbggpcnhnaikajg
Click Add after each
Navigate to Browsers → Manage → Groups & Computers
Select the custom groups or computers you wish to distribute the extension to
Click Distribute Extensions
Select the extensions you just added to the repository
Click Distribute
ManageEngine's documentation is not clear how to manage the settings for the extension via this method. It may be necessary to transition to scripted deployment.
N-able N-Central
Go to Configuration → Scheduled Tasks → Script/Software Repository
Click Add → Script
Choose:
Script Type: PowerShell
Operating System: Windows
Upload a .ps1 of the PowerShell script or paste the script directly
Name the script
Check Browser Extension DeploymentSave the script
Go to Configuration → Scheduled Task → Add Task
Choose Run a Script
Select the script you just uploaded
Configure the task
Name: Check Browser Extension Deployment
Target Devices: Choose specific devices, groups, or filters
Schedule: Set to your desired interval. We recommend on login/startup for best results but a lower frequency can also ensure deployment to all macines
Execution Context: System Account
Click Save and Activate
N-able N-Sight
Go to Settings → Script Manager
Click New
Enter
Check Browser Extension Deploymentfor the name and a brief descriptionSet a timeout period for the script of 600 seconds
Upload a .ps1 file of the PowerShell script leaving
Script check and automated taskselectedClick Save
On the All Devices view, right-click your targeted Client or Site
Select Task → Add
Select the script you just uploaded
Enter a name for the task, e.g.
<Client/Site> Check Browser Extension DeploymentSelect
Once per dayfor the frequency methodSet a Start Date, Start Time, End Date, and End Time as desired
Set a maximum permitted execution time e.g. 600 seconds
Set
Run task as soon as possible if schedule is missedSelect Next
Select the targeted devices and click Add Task
NinjaOne
Go to Administration → Library → Automation → Add → New Script
Enter:
Name
Check Browser Extension DeploymentDescription: To deploy Check by CyberDrain for Edge and Chrome
Categories: Select as approriate for your environment
Language: PowerShell
Operating System: Windows
Architechture: All
Run As: System
Script Variables: Add as desired to customize
Copy the PowerShell script into the editor
Click Save
Go to Administration → Policies
Options are to create a new policy or add the automation to an existing policy targeting Windows devices
Select Scheduled Automation on the left
Click Add a Scheduled automation button
Select the script and set the options for frequency, add variables, etc.
Click Add
Click Save
Pulseway
Go to Automation → Scripts
(Optional) Create a new Script Category called Browser Extensions
Click Create Script
Name the Script
Check Browser Extension DeploymentToggle Enabled under the Windows tab
Select PowerShell as the script type
Paste the PowerShell script into the editor
Click Save Script
Navigate to Automation → Tasks
Click Create Task
Name the task
Check Browser Extension DeploymentChoose the PowerShell script you just added
Set the Scope to All Systems or create a custom scope
Set Daily for Schedule
Save the task
SuperOps.ai
Navigate to Modules → Scripts
Click + Script
Name the script
Check Browser Extension DepoloymentChoose PowerShell as the language
Paste the PowerShell script
Set a timeout of 600 seconds
Choose to run as System/Root User
Save the script
SuperOps has multiple ways to deploy a scheduled action. Please review their documentation for your preferred method
Syncro
Navigate to the Scripts tab
Click +Script
Name the script
Check Browser Extension DeploymentChoose PowerShell as the file type
Set Run As to System
Copy the PowerShell script into the editor
Click Create Script
Navigate to Policies
Click +New Policy
Name the policy
Check Browser Extension DeploymentChoose Scripting policy category
Click +Add Entry
Select the script you just created from the drop down
Select your desired frequency. We recommend at least daily
Click Save Policy
Last updated