Introducción
If your Windows devices are already enrolled in Microsoft Intune, deploying the Level agent is a matter of uploading a PowerShell script and assigning it to your devices. No MSI packaging required.
⚙️ PREREQUISITES
Devices enrolled in Microsoft Intune
Access to the Microsoft Intune admin center
A Level account with permission to add devices
🎬 VIDEO
Install via InTune
This guide is provided as a convenience for Level customers. We recommend that you test before deploying to your production environment.
Step 1: Get the Install Command
In Level, open the Device Listing and click Add new device.
Select Windows from the OS selector.
Optionally select a device group.
Copy the install command from the silent install tab.
Step 2: Create the Script File
Paste the copied command into a new text file and save it with a .ps1 extension.
Step 3: Create the Script Policy in InTune
Sign in to the Microsoft Intune admin center.
Navigate to Devices → Windows → Scripts → Platform Scripts.
Click + Add.
Give the script a name (e.g., "Install Level Agent").
Under Script location, select the
.ps1file you saved.Set Run this script using the logged-on credentials to No.
Set Enforce script signature check to No.
Click Next.
Step 4: Assign to Devices
On the Assignments page, select the groups or devices that should receive the agent. To deploy to all Windows devices, choose Add all devices.
Click Next, review your settings, and click Add.
Step 5: Sync
The script runs the next time assigned devices sync with Intune. Level will be installed and devices will appear in your Device Listing within minutes of the script running.
To force an immediate sync on a specific device:
On the Windows device, go to Configuración and search for "Access Work or School".
Select the Azure AD account and choose Info.
Click Sync.
ℹ️ NOTE: This deployment method is provided as a convenience. Intune behavior varies across environments — test on a small group before deploying broadly.
Preguntas frecuentes
The script ran in Intune but the device isn't showing up in Level — what happened? Check that an AV/EDR tool didn't block the install. The script runs as SYSTEM, so confirm the PowerShell execution policy allowed it to run. See AV/EDR False Detections and Offline Troubleshooting for further steps.
Can I target specific device groups instead of all devices? Yes — on the Assignments page, select specific Azure AD groups instead of "Add all devices." You can also scope by user group if your Intune enrollment is user-based.
Do I need to update the script when my install key changes? Yes. If your install key is rotated, update the
.ps1file and re-upload it to the Intune script policy.Will the script run again if Level is already installed? No. Level will block the install if it detects a currently installed version of Level. If you're concerned about re-runs, you can add a check to the script that exits early if the Level binary already exists at
C:\Program Files\Level\level.exe.