Deployment

One employee installation. Managed operation after that.

Deploy the signed Windows agent directly for a pilot or through Microsoft Intune and Group Policy for managed fleets.

Visible trackingTenant isolatedAudit ready
Enterprise IT team managing a controlled Windows endpoint deployment
Transparent by design
Important: Unattended browser deployment requires approved Chrome and Edge store packages, stable extension IDs and applicable organization-managed browser policy.
Built for accountable operations

Every signal keeps its context.

Varajen Time connects collection, policy, coverage, review and deployment controls so teams can understand both the metric and the evidence behind it.

01

Direct invitation

Invite the employee, provide the signed MSI, connect the invited account, present the monitoring notice and begin tracking according to tenant mode and schedule.

02

Microsoft Intune

Package the MSI as a Win32 application, use silent installation, detect by MSI product code, assign a pilot ring and use remediation for startup repair.

  • System-context silent installation
  • 64-bit Windows 10/11 requirement
  • Pilot-first assignment and recurring health remediation
03

Group Policy

Deploy the MSI through Computer Configuration, apply Varajen administrative templates, configure the signed update channel and enforce approved browser-store IDs.

  • ADMX and ADML policy templates
  • Machine-level Chrome and Edge extension policy
  • Signed HTTPS update manifest and trusted public key
04

Reliable upgrades

Signed update manifests, package hashes and Windows Installer transactions protect releases. Managed rings retain a previous signed MSI for rollback.

  • Pilot, standard and delayed update rings
  • RSA-PSS/SHA-256 manifest validation
  • Package hash verification before installation
05

Remote actions

Connected endpoints can collect queued policy refresh, upload retry, restart, update and privacy-safe diagnostic requests on a future heartbeat.

06

Operational limits

The portal cannot power on or reach a device without internet. Intune or another approved endpoint-management platform is required for out-of-band remediation.

Varajen Time

Make every time metric accountable.

Discuss your deployment