Private Access sensor network requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit b3bc08a · +5 −5 lines · also on GitHub
⋯ 100 unchanged lines
101101
102102
### 7. Install sensor silently (no interactive authentication)
103103
104
−For enterprise environments deploying sensors across multiple domain controllers, silent installation enables automated deployment without requiring interactive sign-in on each DC. This approach is useful when deploying to servers that don't have a GUI, are in remote locations, or when using deployment automation tools like Group Policy, Microsoft Endpoint Configuration Manager, or scripts. By generating an offline token on a workstation with browser access, you can then register sensors on multiple DCs without needing to authenticate interactively on each server.
104
+For enterprise environments deploying sensors across multiple domain controllers, silent installation enables automated deployment without requiring interactive sign-in on each DC. This approach is useful when deploying to servers that don't have a GUI, are in remote locations, or when using deployment automation tools like Group Policy, Microsoft Endpoint Configuration Manager, or scripts. By generating an offline token on a workstation with browser access, you can then register sensors on multiple DCs without needing to authenticate interactively on each server. Silent installation is supported with Private Access Sensor version 2.2.0 or higher, and PowerShell version 5.x.
105105
106106
1. Download sensor to Domain Controller (DC) server and run this cmd in a PowerShell or command window with admin privileges to install quietly.
107107
⋯ 6 unchanged lines
114114
115115
```PowerShell
116116
# Microsoft Private Access / Global Secure Access – Token acquisition script
117
− # Works silently on any Windows machine with PowerShell 7.x or 5.1 (GUI + browser required)
117
+ # Works silently on any Windows machine with PowerShell 5.x (GUI + browser required)
118118
119119
if (-not (Get-PSRepository -Name PSGallery -ErrorAction SilentlyContinue)) { Register-PSRepository -Default }
120120
Set-PSRepository -Name PSGallery -InstallationPolicy Trusted
⋯ 16 unchanged lines
137137
Install-Module Microsoft.Identity.Client -RequiredVersion $msalVersion -Force -Scope CurrentUser -AllowClobber
138138
}
139139
140
− # Load Abstractions DLL (handles PS7 .nupkg quirk)
140
+ # Load Abstractions DLL
141141
$pkg = Get-Package Microsoft.IdentityModel.Abstractions -ProviderName NuGet -RequiredVersion $abstractionsVersion
142142
$folder = if ($pkg.Source -like "*.nupkg") { Split-Path $pkg.Source -Parent } else { $pkg.Source }
143143
Add-Type -Path (Join-Path $folder "lib\net461\Microsoft.IdentityModel.Abstractions.dll")
⋯ 14 unchanged lines
158158
$authResult = $app.AcquireTokenInteractive($scopes).ExecuteAsync().GetAwaiter().GetResult()
159159
160160
if ($authResult.AccessToken) {
161
− $token = $authResult.AccessToken # ← back, exactly like before
162
− $tenantId = $authResult.TenantId # ← back, exactly like before
161
+ $token = $authResult.AccessToken
162
+ $tenantId = $authResult.TenantId
163163
Write-Host "`nSuccess: Token acquired successfully. You can access the value by typing $token in your PowerShell" -ForegroundColor Green
164164
}
165165
else {
⋯ 108 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:16 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.