Deploying AutoElevate via Intune
Learn how to efficiently deploy AutoElevate using Intune for enhanced security and streamlined management of your organization's devices.
Written by Chris Liles
Updated at July 23rd, 2026
Deploying the MSI Package
Steps to Deploy the AutoElevate MSI Package using Intune
Deploying AutoElevate Using Intune
Step 1: Prepare the MSI Package
Download our MSI package AESetup.msi.
Step 2: Add the Application to Intune
Sign in to the Microsoft Intune Admin Center at endpoint.microsoft.com.
- Navigate to Apps > Windows > Add.
- Select Line-of-business app and click Select.
Step 3: Configure Application Settings
Upload the MSI package.
- Enter the Application Name, Description, and Publisher.
- Provide Command-Line Arguments.
- This can be located in the View Installer Information screen from the location of the company.
- Highlight and copy everything in the command line argument section from /quiet to the end.
- Paste the copied information into the command line arguments section of the MSI
- Click Next.
Step 4: Assign the MSI Application
Select the target user group(s) or device group(s).
- Choose Required for automatic deployment or Available for self-installation via Company Portal.
- Click Next, review settings, and Create.
Deploying the PowerShell Script
Overview
This article explains how to deploy the AutoElevate Agent to Windows endpoints using Microsoft Intune and the official AutoElevate PowerShell deployment script.
The PowerShell deployment method automatically downloads the latest AutoElevate MSI installer and installs the agent using the parameters specified within the script. This deployment method is recommended when using Microsoft Intune Platform Scripts rather than packaging the application as a Win32 app. [Generic RM...- CyberFOX | Support Articles]
Prerequisites
Before deploying AutoElevate through Intune, ensure the following requirements are met:
Microsoft Requirements
- Microsoft Intune licensing is configured.
- Target devices are enrolled in Microsoft Intune.
- Devices are running a supported version of Windows.
- The Intune administrator account has permissions to create and deploy PowerShell scripts.
AutoElevate Requirements
- Your AutoElevate License Key is available.
- You know the Company name to assign devices to.
- You know the Location name to assign devices to.
- You have selected the desired:
- Elevation Mode
- Blocker Mode
The official deployment script requires these values to be configured before deployment. [Generic RM...- CyberFOX | Support Articles]
Deployment Method Summary
This deployment process consists of:
- Downloading the AutoElevate PowerShell deployment script.
- Updating the configuration variables.
- Uploading the script to Microsoft Intune.
- Assigning the script to target devices.
- Verifying agent installation.
The script automatically downloads the latest AutoElevate installer during execution, eliminating the need to package and upload the MSI separately. [Generic RM...- CyberFOX | Support Articles]
Step 1: Download the Deployment Script
Download the latest AutoElevate PowerShell deployment script from the AutoElevate Knowledge Base.
The deployment script contains configuration variables that determine:
- License Key
- Company
- Location
- Elevation Mode
- Blocker Mode
These values must be updated before uploading the script to Intune. [Generic RM...- CyberFOX | Support Articles]
Step 2: Configure the Script
Open the PowerShell script in a text editor and update the required values.
Required Variables
Replace each placeholder value with the appropriate information from your AutoElevate environment.
Example
Best Practice:
Validate all values before deployment to prevent devices from being assigned to incorrect companies or locations.
The deployment script uses these values during installation and registration of the AutoElevate agent. [Generic RM...- CyberFOX | Support Articles]
Step 3: Upload the Script to Intune
Sign in to the Microsoft Intune Admin Center.
Navigate to:
Devices → Scripts and Remediations → Platform Scripts
Select Add.
Choose:
Windows 10 and later
Upload the modified AutoElevate PowerShell deployment script.
Step 4: Configure Script Settings
Configure the following settings:
| Setting | Recommended Value |
|---|---|
| Run this script using the logged-on credentials | No |
| Enforce script signature check | No |
| Run script in 64-bit PowerShell host | Yes |
Why Run as SYSTEM?
Running under the SYSTEM context ensures:
- Administrative permissions are available.
- The MSI installs correctly.
- Services can be registered successfully.
- The installation remains silent for the user.
Step 5: Assign the Script
- Select Assignments.
- Choose the Azure AD group containing the target devices.
- Review the configuration.
- Create the deployment.
Recommended Rollout Strategy
Deploy to a small pilot group first:
- IT devices
- Test workstations
- Lab environment
After successful validation, expand deployment to production devices.
Step 6: Monitor Deployment Status
After deployment:
Navigate to:
Devices → Scripts and Remediations
Open the AutoElevate deployment script.
Review:
- Device status
- Success count
- Failure count
- Script execution results
Microsoft Intune reports PowerShell execution status for each targeted device.
Verifying Successful Installation
Verify the AutoElevate Service
On a deployed workstation:
- Open Services.
- Confirm the AutoElevate service is present.
- Verify the service is running.
Verify in the AutoElevate Portal
- Sign in to the AutoElevate Admin Portal.
- Navigate to the appropriate Company.
- Open the configured Location.
- Confirm the device appears in inventory.
Verify Script Execution
Within Intune:
- Open the deployment status page.
- Confirm devices report successful execution.
Common Troubleshooting
Script Does Not Execute
Possible causes:
- Device is not enrolled in Intune.
- Device has not synchronized recently.
- Assignment group is incorrect.
- PowerShell execution failed before installation began.
Resolution
- Verify device enrollment.
- Force an Intune sync.
- Confirm group assignment.
Device Does Not Appear in AutoElevate
Possible causes:
- Incorrect License Key.
- Incorrect Company name.
- Incorrect Location name.
- Network connectivity issues.
Resolution
- Review script variables.
- Verify company and location spelling.
- Redeploy the script after corrections.
Agent Service Is Not Running
Possible causes:
- Installation failed.
- Security software blocked installation.
- Download failed during execution.
Resolution
- Review PowerShell logs.
- Review Intune script output.
- Redeploy after resolving the underlying issue.
Best Practices
- Deploy to a pilot group before broad deployment.
- Use consistent Company and Location naming conventions.
- Document License Key ownership.
- Run scripts under the SYSTEM context.
- Monitor deployment results after each rollout stage.
- Keep the deployment script updated with the latest version from the AutoElevate Knowledge Base. [Generic RM...- CyberFOX | Support Articles]
Summary
Microsoft Intune can deploy the AutoElevate Agent using the official AutoElevate PowerShell deployment script. The script downloads the latest installer automatically and installs the agent using your predefined Company, Location, License Key, Elevation Mode, and Blocker Mode settings, making it a flexible deployment method for Intune-managed environments. [Generic RM...- CyberFOX | Support Articles], [CyberFOX K...ledge Base | Support Articles]
Related Articles
- Generic RMM Deployment using PowerShell commands - CyberFOX [Generic RM...- CyberFOX | Support Articles]
- RMM Tool Integrations & Automated Deployment - CyberFOX [RMM Tool I...- CyberFOX | Support Articles]
- Deploying AutoElevate MSI via Intune [CyberFOX K...ledge Base | Support Articles]