Install Wazuh Agent on Windows (MSI + GPO Mass Deployment)

The Wazuh agent for Windows ships as a signed MSI. The official deployment-variables method installs and enrolls the agent in a single command, which is ideal for both single installs and large GPO rollouts.

1. Download the MSI

Invoke-WebRequest -Uri https://packages.wazuh.com/4.x/windows/wazuh-agent-4.9.0-1.msi -OutFile $env:tmp\wazuh-agent;

2. Silent install with deployment variables

Open an elevated PowerShell and run:

msiexec.exe /i $env:tmp\wazuh-agent /q WAZUH_MANAGER='<MANAGER_IP>' WAZUH_AGENT_GROUP='default' WAZUH_REGISTRATION_SERVER='<MANAGER_IP>'

3. Start the service

NET START WazuhSvc

4. Mass deployment with GPO

1. Place the MSI on a network share readable by Domain Computers.
2. In Group Policy Management, create a new GPO linked to the target OU.
3. Computer Configuration > Policies > Software Settings > Software installation > New > Package, select the MSI.
4. Choose Assigned. The package installs on next boot.
5. For deployment variables, wrap the install in a Computer startup script that calls msiexec with the WAZUH_MANAGER parameter.

5. Verify

Open services.msc and confirm `Wazuh` is Running. On the manager, the agent appears under Agents in the Wazuh dashboard within a minute.