AD-Deployer

A "Deployment Agent" that runs on an AD machine and regularly scans the AD for new clients (set permissions locally via an AD account during agent installation, or grant permissions to the Windows service).

You can apply filters in the Agent Settings, e.g., deploy Octoja only if the client is in a specific OU. (+exclusion list, inclusion list based on hostname).

Then specify which customer and location the new device should be assigned to.

Here’s how I envision it:

New AD Deployer -> Select customer -> Select location -> Download the deployer’s MSI -> Install on the customer’s AD machine -> Set permissions -> AD Deployer registers with Octoja -> Set deployment rules.