ControlUp has deprecated the old Device Registration Codes across all tenants, requiring a transition to new codes for agent deployment. While new agent installations using the latest Device Registration Code proceed without issues, existing devices that were registered prior to the code expiration retain the old registration code in the Windows registry. This persistence causes a problem when these devices become inactive and are removed from ControlUp. Upon attempting to re-register, the ControlUp Agent reads the outdated, expired Device Registration Code from the registry, which leads to a registration failure.
The recommended approach to resolve this for existing devices differs from the process for new installations. The latest Agent Manager deployment automatically uses the new Device Registration Code for fresh agent installs; however, it does not automatically update the registration code already stored in the registry of existing agents. Therefore, device re-registration fails if the persisted old code is expired. There is no official migration tool provided by ControlUp to update this registry value across existing installations en masse. The key registry path involved is `HKLM\SOFTWARE\Avacee\SIP` and the relevant value is `DeviceRegistrationCode`.
For an immediate workaround, ControlUp acknowledges that updating the registry manually or via script on affected devices is effective. This involves stopping the SIP Agent service, updating the `DeviceRegistrationCode` registry value to the current valid code, and restarting the service. Given that agent version auto-updates are managed separately (either by ControlUp version control or via user-managed software deployment like SCCM or Intune), it is the administrator’s responsibility to ensure deployment tools push such remediation scripts or silent Agent Manager reinstalls outfitted with the new Device Registration Code to devices at scale.
In practice, many organizations use deployment platforms such as Intune or SCCM to run remediation scripts that overwrite the expired registration code in the registry of existing agent installations, thereby preventing registration failure without full reinstallation. This approach balances efficiency and scale, allowing smooth transition without requiring large-scale agent removal and fresh installation. Administrators should plan to deploy these registry updates proactively to avoid disruptions caused by automatic agent attempts to re-register post device inactivity cleanup.
For further details on Agent Manager deployment and registry settings, consult the ControlUp documentation at https://docs.controlup.com/.
Read the entire article here...
Microsoft SCCM Related Training & Support Archives
Microsoft SCCM training and support-related archives from inside the ControlUp Community on Slack.
How to Deploy ControlUp Agent via GPO in VDI Environments with MSI Silent Install and PowerShell Automation
Deploying the ControlUp Agent for VDI environments via Group Policy Object (GPO) does not have a dedicated official knowledge-base article, as the installation approach aligns with generic MSI silent installs used in other deployment methods like SCCM or PDQ. The official ControlUp documentation regarding local machine connection and agent communication is the primary reference for deployment: https://support.controlup.com/docs/connect-to-your-machines-locally and https://support.controlup.com/docs/agent-outbound-communication.
For non-persistent VDI setups that use a gold master image, the recommended method is to install the ControlUp agent MSI directly on the master image with specific MSI properties: `MASTER_IMAGE=true`, along with the `AUTHKEY` and `RegistrationKey`. This avoids the need for repeated installations on cloned machines via GPO. For persistent, domain-joined virtual machines, using a GPO Computer Startup Script to run an msiexec command is preferred over GPO Software Installation because it allows passing required MSI properties. An example command line looks like this:
`msiexec /i \\share\ControlUpAgent-xxxx.msi /qn AUTHKEY="" RegistrationKey="" MASTER_IMAGE=true`
The authentication keys are retrieved from the Real-Time Console under Settings → Agent. The Registration Key is mandatory starting from version 9.0. Machines must be manually added to the organization tree unless the agent version is 9.0.5 or higher, which supports self-registration.
When GPO deployment is not optimal, if remote RPC or WMI connectivity is available, deploying the agent remotely via the ControlUp console or Monitor is simpler. For cloud-managed endpoints, Microsoft Intune is the officially documented deployment method.
A practical example was shared demonstrating a PowerShell script to deploy the ControlUp Agent MSI for VDI within a Nerdio scripted action context. The script copies the MSI from a UNC file share to a local temporary path, validates that the MSI file is correctly copied (including a check on the MSI magic bytes), and then executes the msiexec command with silent installation flags, the authentication keys, and logging enabled. It captures and reports installation exit codes and prompts when a reboot is required. The script also includes a post-installation check to list ControlUp-related services to confirm the agent installed and started as expected.
This approach encapsulates the best practice for deploying ControlUp agents in VDI environments using GPO, balancing MSI property requirements, version-specific authentication mechanisms, and practical scripting for automation. For detailed agent deployment contexts and command-line references, the ControlUp official documentation remains the authoritative source: https://support.controlup.com/docs/connect-to-your-machines-locally and https://support.controlup.com/docs/agent-outbound-communication.
Read the entire article here...
Read the entire article here...
Collecting Pending Reboot Information in ControlUp
A discussion took place regarding the use of a script to collect pending Windows update reboots from all systems in a tenant. A screenshot of the JSON format was requested, and it was suggested to test the script as a script action on the device. Another script was shared that would output the JSON correctly. This script was suggested for use instead.
Read the entire article here...
Read the entire article here...
Use Cases and Details in ControlUp
A team member requested assistance on obtaining details for different use cases in ControlUp, mentioning needs for non-standard AV analysis, software metering, startup apps analysis, green IT solutions, SCCM client remediation, and patching remediation. A list of available options from ControlUp were provided.
Read the entire article here...
Read the entire article here...
Troubleshooting the ControlUp Agent Installation Process
Multiple users discussed an issue where over 100 machines were not showing up or installing the ControlUp Edge DX SIP Agent. A suggestion was made to check the windows event log for events from the SIP agent, as well as running a network tester and ensuring AV exclusions and other prerequisites were in place. Mentioned links include the support article and a related download.
Read the entire article here...
Read the entire article here...
ControlUp’s Expansion Plans – Integrating with Other IT Towers and Services
ControlUp is looking to expand their capabilities to support other IT towers such as SD, RDS, and SCCM. There is a request for Jira integration and a suggestion to open a uservoice for SD. A user shares that they are experimenting with n8n as an intermediary between ControlUp and other systems. The possibility of passing data from n8n to an openai ai agent is mentioned. Another user suggests using a plugin on ServiceNow ticket page for troubleshooting and a ControlUp Enrich integration is discussed. The potential for customization through ControlUp's open API is also mentioned.
Read the entire article here...
Read the entire article here...
Creating an Alert for Windows 11 Upgrades Using SCCM and Event Logs
The members of the ControlUp community discussed creating an alert for when users upgrade to Windows 11, and potential methods to determine this information. There was talk of using SCCM for confirmation, querying event logs, and even using a custom script that was shared in the text. The script was described as an experiment that the user can share if others are interested.
Read the entire article here...
Read the entire article here...
Efficient Deployment Strategies for ControlUp Users
Members of the ControlUp team discussed how to handle deployment scripts requiring an install file or certificate. Suggestions included using a shared location or a platform such as MS Intune/SCCM, although issues with Edge DX were noted. Another option would be to manually install through remote control, but automation is preferred. Some members have found success with using workarounds involving Google Drive and PowerShell scripts.
Read the entire article here...
Read the entire article here...
Automating Mass ControlUp Agent Updates
A user asked about mass updating ControlUp agents, which can be difficult to do in the Console with too many connections. Suggested options included using SCCM and/or GPO deployment for non-persistent agents, and MSI installer for persistent machines. There are scripts available to clean any old agents and deploy the new agent, and registry flags can be added on the endpoint to facilitate an override when updating/uninstalling from Console. ControlUp is planning to add an "Agent Manager" in 9.0.
Read the entire article here...
Read the entire article here...
Upgrading Devices to Windows 10 Version 22H2
A user asked about upgrading devices running Windows 10 version 1909 to 22H2 with a script, and it was suggested that they use a patching manager like WSUS or SCCM. ChatGPT also provided a link to a resource for more information at https://chat.openai.com/share/c88a87a6-dccd-4008-9d32-8f6ea84b3019.
Read the entire article here...
Read the entire article here...
