Source: https://manu-tests-all-orgs.docs-staging.pageloop.ai/product/assets-objects/assets/discover-and-sync-assets-automatically # Discover and sync assets automatically Asset discovery helps IT teams maintain accurate, up-to-date visibility into your organization’s IT landscape without relying on manual tracking. Atomicwork automatically ingests hardware and software data into a unified, accurate, and actionable asset inventory that supports: - Faster incident and request resolution - Reliable asset lifecycle tracking - Robust device-based automations Asset discovery works through the Atomicwork Discovery Agent and Lansweeper across modern, distributed environments, alongside integrations with [Kandji](https://support.atomicwork.com/en/articles/12284099), [Microsoft Intune](https://support.atomicwork.com/en/articles/12284085), [Jamf](https://support.atomicwork.com/en/articles/12289323), and Microsoft Azure Resources Manager. Supported sources automatically bring in the full set of attributes each source exposes including device hardware, OS and compliance state, enrollment status, network configuration, installed software, user assignment, and identity-layer signals. Available attributes vary by source. Admins do not need to select individual attributes or maintain mappings between MDM attributes and Atomicwork attributes. ​ ​**Note:** For existing configurations, your current mappings and reports remain intact. Please reach out to your Customer Success Manager for further details or sandbox access. ## Asset discovery sources Atomicwork supports two types of asset discovery sources — agents and scanners. You can **use either or both sources**, depending on your organization’s requirements. ### Agents Agents are installed directly on end-user devices and collect inventory and configuration data specific to that device. By default, agents operate in endpoint-only mode and **do not discover other devices** on the connected network. They collect information like: - **Device info:** Hostname, serial number, device ID, MAC address, domain name - **OS:** Operating system name and version, build number, service pack - **Hardware:** Manufacturer and model, CPU, RAM, memory and disks, BIOS and baseboard details, battery, connected USB devices, and displays - **Software:** Installed apps and versions (including publishers and install dates), Microsoft/App Store apps, OS features, Antivirus and security software - **System configuration:** Drivers, autorun entries, services, certificates, shares, performance metadata - **User and device context:** Currently logged-in user, last seen, system uptime, local users and groups, domain, SID, UPN - **Network:** Internal IP address, network adapter configuration - **Warranty:** Available for supported vendors including Dell, Lenovo, Fujitsu, Toshiba Agents do not monitor user behaviour or activity, and **do not collect:** - Keystrokes - Screen captures - File contents - Browser history - Network traffic content - Personal data outside of device inventory and configuration **Note:** Some organizations choose **an** **agent-only deployment** where agents run in their default endpoint-only configuration and network scanners are not enabled. ### Scanners Scanners are installed on a designated device within a network and are used to discover shared infrastructure, such as printers, switches, routers and other non-endpoint devices. Scanners need to be separately installed from agents, and typically require only one deployment per network. Scanners use common network discovery methods such as subnet discovery, ARP scans, and DNS lookups, to identify devices on the local network of the host device. They collect inventory information similar to agents. ## Setting up asset discovery To set up or manage asset discovery, navigate to **Settings > Assets** and click on **Start Discovery or Manage** in the **Discover assets card.** ## Creating a site A site is a logical grouping of assets based on physical or organizational structure. It could represent an office location (e.g., San Francisco office), a department (e.g., HR), or even a subnet/IP range. Sites help structure how scanners and agents are deployed across networks. For example, if multiple teams manage different regions, you can create separate sites per region. To create a site: - Click on the **+** icon next to **Sites.** - Enter a name for the site. The region defaults to your Atomicwork platform's region but can be changed if needed. - Click on **Create.** After a site is created, you can **download either a scanner or an agent**, depending on your discovery needs. **Note:** Ideally, only **one scanner is needed per network** to supplement discovery of networked assets. Ensure **all end user devices have an agent installed** for deeper visibility and smoother onboarding. ## Dowloading and deploying agents To deploy a discovery agent on end-user devices: - Navigate to your site and click on **Download.** - Choose **Agent** as the download type and then select the OS (Windows, macOS, or Linux). Once the installer file has been downloaded, you can distribute it to end user devices via MDM tools (Kandji, Intune, Jamf), remote access tools like AnyDesk or share the file for manual installation. Here's how you can distribute the agent via MDMs: 1. **Via Microsoft Intune (Windows & macOS)** For Windows devices: - Navigate to **Microsoft Intune Admin Center > Devices > Scripts > Add** - Choose **Windows 10/11 > PowerShell script** - Upload the downloaded `.ps1` file (e.g., `install_agent.ps1`) - Configure the following: - **Run as admin:** ✅ Yes - **Execution context:** System - **Retry if failed:** Optional - Assign the script to appropriate device or user groups For macOS devices: - Navigate to **Devices > macOS > Shell Scripts** - Upload the downloaded file: `atomicwork_installer_agent.sh` - Set the script to run as **root/system** 2. **Via Kandji (only macOS)** - Go to **Library > Add New > Custom Script** - Paste or upload the script from the `atomicwork_installer_agent.sh` file - Assign the script to a **Blueprint**​ 3. **Via Jamf (only macOS)** - Go to **Jamf Pro > Computers > Scripts** - Add a new script named **Install Atomicwork Agent** - Upload the `atomicwork_installer_agent.sh` file or paste the script - Create a new Policy and configure the following: - **Trigger:** Enrollment Complete (or a custom trigger) - **Payload:** Scripts - **Target:** Define the device scope ## Downloading and deploying scanners To scan shared infrastructure (e.g., switches, printers): - Navigate to your site and click on **Download.** - Choose **Scanner** as the download type and then select the OS (Windows, macOS, or Linux). - Install the scanner **on a device connected to the network you want to scan**. This can be a virtual machine or any host system. - The scanner will detect and report all devices visible on the network. ## Viewing sources and discovered assets Once agents or scanners are installed: - Navigate to **Settings > Assets > Discover assets** to see all active sources (agents/scanners) under each site. - Discovered devices will begin appearing in the **Assets** page. - Asset data refreshes automatically every 24 hours. ## Privacy, security, and control Asset discovery in Atomicwork is designed to be transparent and administrator-controlled: - Discovery sources are **explicitly installed and managed by IT** - **Agents default to endpoint-only** inventory collection - **Network scanners** and additional visibility features are **optional** - Customers control where, how, and whether discovery sources are enabled This allows organizations to align asset discovery with internal security policies, regional privacy requirements, and employee expectations. The agents and scanners are downloaded with their standard product branding and **cannot currently be white-labeled or renamed**. Any system notifications or installer messages may reference the underlying technology used by Atomicwork. **Need help?** If you need assistance deploying agents, configuring scanners, or interpreting asset data, reach out to your Customer Success Manager or write to us at [\[email protected\]](/cdn-cgi/l/email-protection#daa9afaaaab5a8ae9abbaeb5b7b3b9adb5a8b1f4b9b5b7). ## FAQs 1. **Does the agent monitor what I do on my laptop/computer?** No. The agent does not track user activity of any kind including keystrokes, screen content, files, or browser history. It collects device inventory and configuration data only. ​ 2. **Does** **the agent scan my home or office network?** No. By default, agents run in endpoint-only mode and collect data only from the device they are installed on. ​ 3. **What's the difference between agent-only and agent + scanner deployments?** In an **agent-only** deployment, only end-user devices report their own inventory. Apart from the internal IP address and network adapter configuration, no network information is collected. ​ In an **agent+ scanner** deployment, scanners are used to discover shared network devices like printers and switches, in addition to end-user devices, and record their inventory information. ​ 4. **Are scanners required for asset discovery?** No. Scanners are optional and installed separately. Some organizations use agents only, especially for remote or distributed teams. ​ 5. **Does the agent run in the background?** Yes. The agent runs as a background service to keep device information up to date.