How do I install OneAgent on Windows?

Follow the steps below to download and install Dynatrace OneAgent on Windows:

  1. Download the installer. There are two options:

    • Click the Download agent.exe button to download Windows installer (EXE file) for single-server installation.
    • Click the Download MSI package link to download the Windows installer for Group Policy deployments. You get a ZIP package that includes an MSI file and a batch file with the command line you can copy and paste when configuring Group Policy for Dynatrace installation. The default installation should work in most cases, but if you need to customize it, modify only the parameters described below. Then, you have to create a distribution point, assign a package (the OneAgent MSI installer with parameters) and publish your policy.
  2. Run the executable file and follow the displayed instructions. You'll need administrator rights to install OneAgent.

How to customize installation

The Windows Group Policy installer can be used with command line parameters when you can't use the default settings. Note that all parameters except SERVER, TENANT and TENANT_TOKEN are optional.

What happens during installation

Dynatrace OneAgent is a set of specialized services that have been configured specifically for your monitoring environment. The role of these services is to monitor various aspects of your hosts, including hardware, operating system, and application processes.

During the installation process, the installer

  • Installs executable code and libraries that are used by Dynatrace OneAgent.

  • Creates entries in the Windows Registry that start Dynatrace OneAgent as a SYSTEM service. Additionally, the oneagentmon device and WinPcap are installed to allow better integration with the operating system and to facilitate the capture of network statistics.

  • Checks the system’s global proxy settings.

  • Checks for a connection to Dynatrace Server or ActiveGate (if you installed ActiveGate and downloaded the OneAgent installer after ActiveGate was connected to Dynatrace).

  • Creates its own user (dtuser). This user is utilized by services that don’t require root privileges. This user is a member of the Performance Monitoring Users group, and can only log in as a service. The password is randomly generated during installation and stored encrypted. You can't change the password. For security purposes, the dtuser is not allowed to:

    • Access computer from the network.
    • Log in as a batch job.
    • Log in locally.
    • Log in through Remote Desktop Services.
      The dtuser is required for Dynatrace to operate properly, therefore you must not delete it. If, for some reason, the dtuser was deleted, next update will recreate it.

For a summarized view of the changes made in your system's files by OneAgent installation, please visit Changes on Windows files page.

It’s recommended that you install the version of WinPcap that is packaged with the Dynatrace OneAgent installer. Its library is the cornerstone of Dynatrace network analysis. We’ve packaged the library in such a way that its DLLs are seamlessly integrated with Dynatrace software, thereby enabling unattended updates and other advantages. If you already have WinPcap installed, please remove it before Dynatrace OneAgent installation. The installer includes the latest, unmodified version of the library&so any other software you have that relies on WinPcap won’t suffer from library loss.


Continue with finalization of OneAgent installation on Windows.