Every PC is occupied by updates.
Well… every PC but yours.
Adminorix deploys your software and enforces your policies on every workstation from one central server. Silent for users, safe for the company, fully traceable for admins. No magic potion required.
Take back control of your fleet
No more manual installs, forgotten machines, or configurations drifting off like a runaway boar.
Automatic deployment
Firefox, Thunderbird, patches, cleanup… Describe your actions once and they roll out to every workstation, in the exact order you want. Faster than a menhir delivery.
No proof, no execution
Every action list is cryptographically signed. The agent installs nothing unless it can verify where the files come from. It trusts no stranger, not even a Roman in a toga.
Invisible to your users
The agent runs as a service with administrator rights. No elevation prompts, no interruptions, no support tickets. Not even a squeak from the bard.
Complete, centralized logs
Who ran what, where, when, and with what result: outputs, exit codes, software inventory of each machine. A village chief who knows everything.
Self-updating agent
The agent updates itself from your server, with signature checks and automatic rollback if the new version fails to start.
Polite with your network
Downloads capped at 30% of bandwidth (configurable) with automatic resume. It eats like a Gaul, but never takes the whole boar.
Easy to set up
From your first machine to the whole village in four steps.
Create the agent
In the console, generate an agent: you get a client ID and an installation key. Think of it as a secret recipe, minus the mistletoe.
Install
An install script configures the workstation. The agent registers and binds itself permanently to the machine.
Drop your actions
One folder per software, a check script, an optional install script. That's it. Even Obelix could do it.
Watch the results
Every run reports back to the server, even after a period offline. Nothing is lost, not even a helmet.
Smart: it only acts when needed
Each action starts with a lightweight check. Heavy downloads and installs only happen if the machine truly needs them. No need to fight when there's nobody to fight.
- Software already up to date? No download at all.
- Action needing the user's session? Postponed until they log in.
- Server unreachable? The agent keeps retrying and installs nothing unverified.
- Something failed? It's recorded and reported in the logs.
0100-Firefox/ ├─ 00-check.bat # already installed? → exit 0 └─ 01-install.bat # otherwise (exit 42) → install 0099-Cleanup/ └─ 00-check.bat # simple action, all-in-one 0200-Thunderbird/ ├─ 00-check.bat └─ 01-install.bat
Security built in from day one
Deploying with elevated rights demands total trust. Adminorix builds it on proven standards, a bit like a palisade, but with cryptography.
Signed action lists
Ed25519 signatures in JWS format. Only your server holds the private key; any tampered list is rejected. The sky may fall on our heads, but not a forged list.
File integrity
SHA-256 hash and size of every archive are verified before execution. A locally modified file never runs.
OAuth 2 authentication
Standard client credentials flow, short-lived access tokens (1 hour) on every API route.
Anti-cloning protection
The configuration is bound to the machine. Copy it to another computer and it becomes useless: access denied. Nice try, Caesar.
Protected secrets
On Windows, the installation key is encrypted on disk with DPAPI. The server only keeps a hash of the secret.
No-downgrade updates
Signed manifest, strictly higher version required: nobody can force back an old vulnerable build.
A clear administration console
Everything is driven from a web interface behind authentication. The chief's tent, but with a login form.
- Manage the actions to run on workstations
- Browse the logs reported by each computer
- Create, revoke and reset agents (after a motherboard swap, for example)
- Publish new agent versions
- Set the log retention policy
Log retention under control
Keep what matters, without filling your storage like a pile of Roman helmets:
- Automatic purge after N days (90 by default)
- Bulky outputs purged sooner, metadata kept
- Longer retention for failed runs
Reliable, even offline
Technology & compatibility
| Component | Details |
|---|---|
| Agent | Written in Rust, lightweight, delayed-start Windows service |
| Server | PHP 8.5 / Symfony 8 over HTTPS, self-hosted: your data stays in your village |
| Scripts | Batch (.bat) on Windows, shell scripts (.sh) planned for Linux and macOS |
| Systems | Windows from the first release · Linux and macOS coming (the Romans don't have them all yet) |
“These unmanaged PCs are crazy!”
Ready to simplify your fleet management?
Let's talk about your environment and see Adminorix in action. The boar roast is on us.
Request a demo