Intune App Packaging

Deploy Datto RMM Agent via Intune | Win32 Packaging

Published 17 March 2026 · 5 min read

Datto RMM is the remote monitoring and management platform used by many managed service providers. Like NinjaRMM, the agent installer is downloaded from your portal pre-configured with your site token, making deployment straightforward. This guide covers silent deployment via Intune and the service-based detection rule.

Contents
  1. Prerequisites
  2. Download your site installer
  3. Wrap with the Content Prep Tool
  4. Add the app in Intune
  5. Install and uninstall commands
  6. Detection rule

Prerequisites

Download your site installer

Log in to your Datto RMM portal and work through to:

Setup → Devices → Deploy Agent → select your site → Download Windows Installer

Download the Windows installer for your target site. It will be pre-configured with your site token. The filename is typically DattoRMM-Setup.exe or a site-specific name.

⚠️
Site-specific installer
Like NinjaRMM, the Datto installer contains your site token. Devices that run it will appear in your Datto RMM portal under that site. Do not share the installer externally.

Wrap with the Content Prep Tool

IntuneWinAppUtil.exe -c "C:\AppSource\DattoRMM" -s "DattoRMM-Setup.exe" -o "C:\IntunePackages"

Add the app in Intune

Intune Admin Centre → Apps → Windows → + Add → Windows app (Win32)
  1. Upload the .intunewin file
  2. Name: Datto RMM Agent
  3. Publisher: Datto, Inc.

Install and uninstall commands

⚙️
Program settings
[]
Install commandSite token is embedded - no additional switches needed
DattoRMM-Setup.exe /S
Uninstall command
C:\Program Files (x86)\CentraStage\uninstall.exe /S
Install behaviour
System
Device restart behaviour
No specific action

Detection rule

# Detect Datto RMM Agent (CagService)
$svc = Get-Service -Name "CagService" -ErrorAction SilentlyContinue
if ($svc) { Write-Output "Detected"; exit 0 } else { exit 1 }
💡
Test your detection rule first
Before deploying to users, install the app manually on a test device and verify the detection rule matches. Check the file path or registry key exists before assigning to a group.

Frequently Asked Questions

Q: How do I deploy the Datto RMM agent via Intune?

Download the agent installer from your Datto RMM portal under Setup > Devices > Deploy Agent. The MSI or EXE is pre-configured with your site token. Deploy it silently with /S or /quiet.

Q: Does the Datto RMM agent installer include my site configuration?

Yes. Like NinjaRMM, the Datto RMM installer you download from the portal is pre-baked with your site ID and token. The agent self-registers to your account without needing additional switches.

Q: How do I detect the Datto RMM agent in Intune?

Use a PowerShell detection script checking for the CagService Windows service, or a file detection rule checking for CagService.exe in C:\Program Files (x86)\CentraStage.

Q: Can Datto RMM and Intune run on the same device?

Yes. Datto RMM and Intune serve complementary purposes. Intune handles device policy and app deployment from Microsoft, while Datto RMM provides remote management, patching, and monitoring features through the MSP toolset.

More App Packaging Guides
→ Deploy NinjaRMM Agent via Intune→ Deploy TeamViewer Host via Intune→ Deploy Wireshark via Intune
Installer typeEXE (NSIS) - site-specific
Silent installYes - /S
Site tokenEmbedded in downloaded installer
Service nameCagService
Reboot requiredNo
// need intune set up properly?
Fixed-price Intune setup for UK businesses

I set up Intune for UK small businesses at a fixed price - app deployment, compliance policies, Conditional Access, and full documentation handed over at the end.

View Packages
#intune #app-packaging #win32