Deploy Device Protection with Rippling

Use Rippling to deploy Aikido Device Protection across your managed Windows fleet with the required permissions in place.

Installation

1. 1

   What you'll need

   Before starting, make sure you have the following from the Aikido Device Protection dashboard:

   • Your PowerShell install command (copied from the user group selector on the dashboard, includes token + installer download)

   If you're missing it, go back to the Aikido Device Protection dashboard, click Connect Device.

2. 2

   Run the install command on managed devices

   1. In Rippling, go to IT → Device Management → Scripts (the PowerShell script library for Windows).
   2. Click New script and select PowerShell as the script type.
   3. Set a Name (e.g. "Install Aikido Device Protection").
   4. Set the Run as context to SYSTEM so the installer has the privileges to write to Program Files and register the service.
   5. Set the Schedule to Run once so the script fires on each targeted device a single time.
   6. Paste the PowerShell install command copied from the Aikido Device Protection dashboard into the script body.
   7. Click Save, then click Deploy and select the target employees or device groups.

   The PowerShell command bundles your Device Protection token, downloads the latest installer, and installs silently. There is no extra MSI to upload.

3. 3

   Apply the lockdown policy

   1. In Rippling, go to IT → Device Management → Scripts and click New script.
   2. Select PowerShell, set Run as to SYSTEM, and set Schedule to Run once.
   3. Paste the following script into the body:

   $tmp = "$env:TEMP\aikido-applocker.xml"
   Invoke-WebRequest -Uri "https://raw.githubusercontent.com/AikidoSec/safechain-internals/refs/heads/main/docs/aikido-applocker-deny-mdm.xml" -OutFile $tmp
   Set-AppLockerPolicy -XmlPolicy $tmp -Merge
   Remove-Item $tmp -Force

   4. Click Save, then Deploy to the same device group.
4. 4

   Reboot devices after installation

   Rippling does not expose a one-click restart action for Windows in the device list. Trigger the reboot with a short script:

   1. In Rippling, go to IT → Device Management → Scripts and click New script.
   2. Select PowerShell, set Run as to SYSTEM, and set the Schedule to Run once.
   3. Paste the following into the script body:

   shutdown.exe /r /t 60 /c "Restarting to activate Aikido Device Protection"

   4. Click Save, then Deploy to the same device group that received the installer.

   The agent fully activates on the next boot.

Troubleshooting