Platforms · Windows
Full endpoint control for Windows workstations and servers.
The Windows agent is where Remedion delivers the deepest CE Plus controls—Windows Update, application control and USB lockdown, BitLocker escrow, hardening profiles, recorded remote control, live PowerShell, Defender, SSPR, and mass MSI deployment—alongside shared remediation and inventory.
Windows agent features
The controls assessors and insurers expect—operated continuously.
Deploy with MSI via GPO, Intune, SCCM, or RMM. Agents check in over outbound HTTPS and execute only allowlisted jobs from the portal.
Windows Update & patch policies
Visibility of missing updates, scheduled OS and application patching, driver/firmware workflows, and reboot handling for workstations and servers.
Application control & USB lockdown
Block unapproved installers and USB storage, maintain approved software lists, and audit exceptions—core CE Plus endpoint controls.
BitLocker enablement & key escrow
Track encryption status, enable BitLocker by policy, and escrow recovery keys with permissioned, audited reveal.
CE hardening & local admin
Fleet Windows security profiles, CE Hardening probes with remediate where supported, and managed local administrator (LAPS-style) workflows.
Vulnerability remediation
Software inventory, vulnerability findings, and allowlisted remediation jobs—plus Dell vendor scans and feature upgrades where applicable.
Certificates, scripts & AI assist
TLS certificate inventory and renewals, approved PowerShell scripts in Base, and AI-assisted Windows event investigation with human review.
End-user authentication & SSPR
Helpdesk caller verification and secure self-service password reset for Windows / Entra-backed users.
Recorded remote control, live PowerShell & location
Interactive Windows desktop with optional session recording, real-time PowerShell, and Windows Location Services tracking—licensed with Productivity.
Microsoft Defender console
Protection status, signatures, and threats from the Security add-on—operated next to CrowdStrike when Falcon is present.
Productivity & mass deployment
Work-day productivity signals from the agent, plus MSI installers ready for GPO, Intune, SCCM, or RMM mass deployment.
Supported Windows versions
Workstations and servers in active Microsoft support.
Windows 10 / 11
Workstations — current supported builds
Windows Server
2016, 2019, 2022, and current LTSC/Server releases in support
Deploy
RemedionAgent.msi for GPO, Intune, SCCM, or RMM
Windows vs Linux
One portal. Platform-aware agents.
Shared inventory, patching, certificates, scripts, and hardening—plus Windows-first controls where the OS requires them. See Windows and Linux for the full feature lists.
| Capability | Windows | Linux |
|---|---|---|
| Core | ||
| Endpoint agent (outbound HTTPS) | Yes | Yes |
| Host / software / services inventory | Yes | Yes |
| OS & package patching from portalWindows Update / winget vs apt on Ubuntu/Debian | Yes | Yes |
| Vulnerability findings & remediation jobs | Yes | Yes |
| Vuls Linux CVE scanning | — | Yes |
| TLS certificate inventory & lifecycle | Yes | Yes |
| ScriptingAI (PowerShell / bash library) | Yes | Yes |
| Remote web shell (outbound) | Yes | Yes |
| Security controls | ||
| Disk encryption visibilityBitLocker on Windows; LUKS on Linux | Yes | Yes |
| Policy-driven encryption enablement & key escrowFull BitLocker enable + escrow on Windows; LUKS status on Linux | Yes | Partial |
| Application control & USB lockdown | Yes | — |
| CE / security hardening profiles | Yes | Yes |
| Managed local administrator (LAPS-style) | Yes | — |
| Microsoft Defender management consoleSecurity add-on | Yes | — |
| Identity | ||
| End-user auth & SSPRDesigned for Windows / Entra identity workflows | Yes | — |
| Operations | ||
| Asset productivity timelines | Yes | Partial |
| Live PowerShell (real-time)Productivity add-on on Windows | Yes | — |
| Recorded remote desktop controlProductivity add-on; Linux uses outbound web shell | Yes | — |
| Windows Location Services tracker | Yes | — |
| AI event-log investigation assistStrongest on Windows event logs today | Yes | Partial |
| RemediAI troubleshooting chatPer-agent RemediAI add-on; scoped to licensed modules | Yes | Yes |
| Mass deploy via MSI / Intune / GPOLinux: package + install script for RMM / imaging | Yes | Partial |
| Lifecycle | ||
| Asset EOL / EOS outlook | Yes | Yes |
Running Ubuntu or Debian too?
Linux agents cover apt patching, Vuls scanning, certificates, hardening, and LUKS visibility in the same portal.
Start with Windows in your trial
Create a trial account, download the Windows agent from the portal, and expand to Linux when you are ready.