Install the agent

Prerequisites

Before installing the AD Agent, ensure you have:

• Administrator privileges on the target machine

• Network access to your Active Directory domain controller(s) and LDAP(s) enabled on the Domain Controller(s)

• Internet connectivity to https://d3g543zyzzpcxb.cloudfront.net/ for automatic agent updates (verify with Test-NetConnection -ComputerName d3g543zyzzpcxb.cloudfront.net -Port 443)

• Create a user account with appropriate AD permissions: Follow the below steps to configure permissions in AD:

  • Go to individual domain controller (DC) machine >Active Directory Users and Computers App

  • Go to properties of the DC (corp.example.com) > Security > Click Add.

  • Add the below permission:

    • "Read" Permission (Required for Application Discovery)

  • If you are using lifecycle features of our product, ensure the user is a part of "Enterprise key admins" Group.

• (For Heartbeat Mode) BalkanID credentials:

  • Tenant ID

  • Tenant Key

  • Tenant Secret

  • Integration ID

---

Installation

Step 1: Download the Installer Script

Download the install.ps1 script from the official BalkanID distribution URL:

• Direct link: install.ps1

You can either:

• Download via browser and save it (e.g., to C:\temp\ or Downloads), or

• Download via PowerShell (run in an elevated PowerShell window):

  Invoke-WebRequest `
    -Uri "https://d3g543zyzzpcxb.cloudfront.net/files/balkanid/ad-agent/latest/install.ps1" `
    -OutFile "C:\temp\install.ps1"

Adjust the -OutFile path as needed.

Step 2: Run the Installer

1. Open PowerShell as Administrator:

   • Right-click on PowerShell

   • Select "Run as Administrator"

2. Run the installer:

   .\install.ps1

   The installer will:

   • Download the latest AD Agent executable from the CDN

   • Install it to C:\Program Files\BalkanID\ad-agent\

   • Create configuration directory at C:\ProgramData\BalkanID\ad-agent\

   • Create logs directory at C:\ProgramData\BalkanID\ad-agent\logs\

   • Install the Windows service BalkanIDADAgent

Step 3: Verify Installation

After installation completes, verify the service is installed:

Get-Service -Name "BalkanIDADAgent"

You should see the service listed. The service may be stopped initially until configuration is complete.