Pre-requisites

Roles required to perform this action

1. Organization owner
   
2. Organization admin
   

To enroll a device

1. Log in to Zoho Directory.
   
2. In the Admin Panel, click Device Management.
   
3. Click Get Started.
   
   
   
        
   
   
4. Follow the steps displayed for downloading and installing Zoho Directory agent according to the type of operating system you use.
   
5. To add more devices, click Enroll Device.
   
   
   
        

Prerequisites for agent installation

For macOS devices

1. Make sure you have admin credentials.
   
2. The device you're attempting to enroll must not be bound by Active Directory.
   
3. The device must support any of the versions specified on the enrollment page.
   
4. You need admin privileges with secure token access. Also, an Active Directory-bound mobile account must be converted to a local account before installing the agent. Make sure you enable full disk access for the agent to be downloaded. This can only be done through an admin account.
   

Important note for macOS Tahoe 26.1 and later:
Due to a temporary macOS issue, the Zoho Directory agent will not appear automatically in your Full Disk Access settings. The installer will guide you to locate and select it manually. Please follow the on-screen prompt and the steps below when prompted.

For Linux device

1. Make sure you have admin credentials.
   
2. The device you're attempting to enroll must not be bound by Active Directory.
   
3. The device must support any of the versions specified on the enrollment page.
   
4. The package libnotify_bin has to be installed.
   

For Windows devices

1. Make sure you have admin credentials.
   
2. The device you're attempting to enroll must not be bound by Active Directory.
   
3. The device must support any of the versions specified on the enrollment page.
   
4. Make sure you install the latest version of Visual Studio Redistributable on the device to be enrolled. You can download it from this site.
   
5. In Group Policy Editor, the following policies must be disabled:
   
1. Interactive logon: Don't display last signed-in
   
2. Interactive logon: Require Windows Hello for Business or smart card
   

Path: Edit group policy → Computer configuration → Windows settings → Security settings → Local policies → Security options → Interactive logon policies
A Microsoft Outlook account must not be used as a local account while assigning a user.

Steps for installation

For macOS

1. Copy the Installation Key and click Download Agent. Once the download is complete, install the agent by following the on-screen prompts.
   
2. Extract the downloaded zip file and double click the .pkg, the ZD agent installation window pops up.
   
3. The installation window prompts for an "Installation Key". Enter the key in the dialog box and continue.
   
4. This key can be obtained from device management panel under macOS section.
   
        
   
   
5. Installation window pops up to enter your secure token-enabled admin local account credentials. Grant Full Disk access to zagent-directory when prompted.
   
        
   
   If you don't see the Zoho Directory binary listed in Full Disk Access:
   
1. Navigate to System Settings → Privacy & Security → Full Disk Access
   
2. Make sure you have admin permissions to make the changes.
   
3. Click the + button.
   
4. Press Command + Shift + G to open Go to Folder.
   
5. Enter: /opt/ZohoDirectory/bin/zagent-directory.
   
6. Click Go.
   
7. Select zagent-directory and click Open.
   
8. Alternatively, you can drag and drop the zagent-directory file directly into the Full Disk Access window. The binary will not appear in the Full Disk Access list even after adding it. This is expected behavior. The installation will automatically resume once the permission is applied.
   
6. Once the agent installation is successful, the device should be available and manageable in the Device Management panel.
   

For Linux

1. Switch to the Linux enrollment page. Copy both the Installation Key and the Linux agent download script.
2. Open the Terminal or Command Prompt on the device in which you want to install the Linux agent.
3. Enter the copied Linux agent download script. A message asking for your login password to verify the installation will appear. Type in the password to proceed.
   
        
   
   
4. When prompted, enter the Installation key.
   

For Windows

1. Click Download Agent. Once the download is complete, extract the corresponding zip file at its location. Make sure file extraction at the appropriate location is done properly, otherwise agent installation will end up unsuccessful.
   
        
   
   
2. Double-click the Directory-Windows-Agent.msi file and install the agent by following the on-screen prompts.