# Windows: Downloading and Deploying The Windows Agent

Please review the Windows agent parameters. They can be adjusted as needed. It is recommended that the default values be kept. Please go to "Settings & Reporting" -> "Deployment Settings", then click "Configure Management Module." The duration can be set lower for small-scale deployments.

<figure><img src="/files/bmSF4uZTX3GXydIxxJ1v" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/tL2KUL85GAxuhtBtqPZv" alt=""><figcaption></figcaption></figure>

## The Windows Agent Settings

<table><thead><tr><th>Parameter</th><th width="295.3333333333333">Purpose</th></tr></thead><tbody><tr><td>Communication Interval</td><td>The agent and the portal communication interval. It is based on minutes.</td></tr><tr><td>In-Depth Search Interval</td><td>Agents can in-depth search on machines and this is the search interval. It is based on minutes.</td></tr><tr><td>Remediation jobs Interval</td><td>The time interval that the agent gets the remediation info. If there is any remediation job assigned to the agent, the agent will get this information in that interval. It is based on minutes.</td></tr><tr><td>Maximum Number of Active Data Collectors</td><td>The active number of parallel collections, a lower number means lower source usage and the default value is min 3.</td></tr><tr><td>Data Collection Servers</td><td>The Sensor address for collection of the data.</td></tr></tbody></table>

## The Package Manager Settings

<table><thead><tr><th>Parameter</th><th width="295.3333333333333">Purpose</th></tr></thead><tbody><tr><td>Update Check Interval (minutes)</td><td>The interval for the package manager to communicate with the portal to get and send the settings.</td></tr></tbody></table>

Other options are not recommended in this situation, so there is no information about them on this page. But the settings are clear to understand that most of them are intervals of each collection loop or specifying the artifacts.

Once the intervals are entered, click on the "Save" button. For small-scale testing, the parameters can be set to 5 minutes. The duration should be increased for larger-scale deployments.

Windows Threat Monitor Settings are specifically designed for monitoring process activity, honeypot accesses, file activity, and script executions. Default intervals should be like the image below, but please edit as per your system requirements.

<figure><img src="/files/r36SAKuWzpppWPXYgr3X" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/LVvayVkt7xGNuFMukFYQ" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/Jl2XUI0t0sMafTHWBEug" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/LhyIlz5pl2by84jhZDgC" alt=""><figcaption></figcaption></figure>

## The Agent Deployment

Go to "Settings & Reporting" -> "Deployment Settings", then click on "Download". The executable Windows agent should be started after that. Once it is downloaded, click to run the executable, and when it is done, the machine data will be added to the portal.

Once the agent is deployed, please check initial data is being populated. Initial Sysmon data can take up to 15-20 minutes to be available within the system based on the configured parameters. Autoruns, processes, inventory data, and device information are available for Windows agents.

<figure><img src="/files/nUIgfTCT4Y7Ma3KSd9dQ" alt="" width="375"><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloudcyte.com/getting-started/agent-based-deployment/4.-agent-deployment/windows-downloading-and-deploying-the-windows-agent.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.