Installing the agent

The Dynacop agent is a single lightweight install per Windows machine. It adds the sign-in credential provider, runs Shield, and reports to the panel.

Requirements

64-bit Windows. The installer is x64; a 32-bit build cannot read its own settings.
Administrator / elevation to install.
Windows Firewall enabled if you want Shield to block attacking IPs.
Tested on Windows Server 2025 (console, lock, and RDP sign-ins).

Download

Get Dynacop Setup from the panel: Resources → Download Dynacop Setup. It’s a single bundle that installs both the agent and the auto-updater, and shows as one entry in Programs & Features.

Interactive install

Run Dynacop-Setup.exe.
The wizard checks connectivity to the Dynacop cloud.
Paste the registration code from the panel (Resources → Add resource).
Finish. The service starts and registers the machine to your workspace within about a minute.

Re-running the installer on an already-registered machine keeps its registration (no access is lost).

Silent / fleet deployment

For many machines, generate a reusable registration key (with a max-uses limit and expiry) when adding a resource, then install silently:

Dynacop-Setup.exe /quiet ClaimCode=DC-xxxxxxxx

To point the agent at a specific backend (MSP or self-hosted), add BackendUrl=:

Dynacop-Setup.exe /quiet ClaimCode=DC-xxxxxxxx BackendUrl=https://api.dynacop.com

The download URL is stable, so you can script it into your deployment tool.

Registration code vs enrollment

Keep these two separate:

Registration code (DC-…) authorizes a machine to join your workspace. You generate it in the panel.
Enrollment is how a person sets up their authenticator, via an emailed link. See inviting people.

After install

A fresh machine can’t lock anyone out: Enforce is off by default, so the password-only sign-in remains available until you deliberately turn enforcement on. Verify the machine appears online under Resources, then follow the quick start from step 4.

Trouble? See Troubleshooting — especially clock skew.