---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Install ACC on Windows

# Install ACC for DEX on Windows {#ariaid-title1}

Release version: Brazil  
Updated October 22, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read  
Install Agent Client Collector (ACC) on a Windows device so that Digital End-User Experience (DEX) can collect performance data and identify issues.

## Before you begin

The ITOM Cloud Services plugin must be installed.

An agent registration key must be created. For instructions, see [Create an ACC registration key](https://www.servicenow.com/docs/6tA3pQ39D~DFsAcQNVW2PA "Set up an Agent Client Collector (ACC) by creating an agent registration key to identify and authenticate agents that are enabled to send data to the collector. The key helps promote the security and integrity of the data collected from the system.").

Confirm the following device and network settings before you install the agent:

* Authentication: Digital End-User Experience uses mutual Transport Layer Security (mTLS) to authenticate devices.
* Ports and protocols: communication with the ServiceNow cloud occurs over port 443 using mTLS, with specific certificates and proxy settings.
* Firewalls: outbound HTTPS traffic on TCP port 443 is permitted from every device running an ACC agent to the designated ServiceNow cloud FQDNs or IP ranges.
* Proxy: if device connectivity to the internet is routed through a proxy network, the proxy must be configured. For details, see [Configure ACC to use a proxy for all traffic](https://www.servicenow.com/docs/xhRO5JM9g84a7pq_r4yTeA "Configure the Agent Client Collector (ACC) to use a proxy for all traffic by setting environment variables.").
* User data: the User \[sys_user\] table is populated so that the CI record in production is assigned with the first and last name of the logged-in user of the device.

{#install-acc-for-dex-windows__ul-prereq-acc-install-windows}

For enterprise-wide deployments, contact your Microsoft Intune or Microsoft Configuration Manager application administrator.

Role required:
agent_client_collector_admin

## Procedure

1. Retrieve the agent registration key:  
   1. Navigate to AllAgent Client CollectorDeploymentAgent Registration Key.
   2. Select the relevant agent registration key.
   3. Copy the registration key value and store it in a place where you can easily retrieve it, when needed.
   {#install-acc-for-dex-windows__ol_hsz_yp2_ndc} {#install-acc-for-dex-windows__step-retrieve-acc-key}
{#install-acc-for-dex-windows__step-retrieve-acc-key}
2. Retrieve the publicly accessible gateway URL, based on your location:  
   * AMER (Americas): itomcnc-prod-gateway-amer.sncapps.service-now.com:443
   * EMEA (Europe): itomcnc-prod-gateway-emea.sncapps.service-now.com:443
   * APAC (Asia Pacific): itomcnc-prod-gateway-apac.sncapps.service-now.com:443
   {#install-acc-for-dex-windows__ul_c12_zgw_3kc} {#install-acc-for-dex-windows__step-retrieve-gateway-url}
{#install-acc-for-dex-windows__step-retrieve-gateway-url}
3. On the Windows server where the agent is installed, enter the following command:  

       msiexec /i <msi_file_path> /quiet /qn /norestart CONNECT_WITHOUT_MID="true" ACC_CNC="<gateway_endpoint>" REGISTRATION_KEY="<registration_key>" INSTANCE_URL="https://<instance_url>"

   The following table shows the parameter values in the command.
   {#install-acc-for-dex-windows__table_usf_fpf_wfc__entry__2}

   | Parameter | Description |
   |-|-|
   | CONNECT_WITHOUT_MID | Specify <kbd class="ph userinput">true</kbd> to enable MID-less Agent Client Collector installation. If you don't specify a value, the regular MID Server WebSocket installation is invoked. |
   | ACC_CNC | Specify a public gateway endpoint for Agent Client Collector. |
   | REGISTRATION_KEY | Active and valid registration key for the agent to communicate with. |
   | INSTANCE_URL | ServiceNow instance that the agent is registered with. |
   | ACC_ALLOW_LIST | Optional string. To disable the allow list, set ACC_ALLOW_LIST=0. By default, the allow list is enabled. Note: Disabling the allow list compromises your system's security and is intended as a temporary measure while you're updating the allow list. After completing the update, enable the allow list by setting ACC_ALLOW_LIST=1. |
   | ACC_VALIDATE_SIG | Optional string. To disable verification of the installer certification validation, set ACC_VALIDATE_SIG=0. By default, validation is enabled. Note: Disable the certification validation only when using nonstandard signature validation tools. |
   | LOCALUSERNAME | Optional string. Specify <kbd class="ph userinput">SYSTEM</kbd> to run ACC as a local system account user. Note: If you specify this parameter, you don't need to complete the procedure [Run ACC as a local system account user](https://www.servicenow.com/docs/WkF5asWdDx~knAX_ZxEk7Q "Run Agent Client Collector (ACC) as a local system account to fetch the complete playbook content data for a Windows device."). |
   [Table 1. Installation command-line parameters]

   {#install-acc-for-dex-windows__table_usf_fpf_wfc} {#install-acc-for-dex-windows__step-run-install-command}
{#install-acc-for-dex-windows__step-run-install-command}
4. Start the Agent Client Collector service using the default ServiceNow user role created during this installation.  
   The default ServiceNow user role has the following privileges:
   * Performance Monitor: Viewing all performance counters in the system.
   * Log on as a service: Starting network services and services that run continuously, even when no one is logged in to the console.
   * Debug program: Monitoring the installed applications and collecting in-depth metrics and remedial actions, such as restart and stop.
   {#install-acc-for-dex-windows__ul_p1p_5s4_qdc}
5. To collect DEX metrics, restart the ACC service using one of the following methods:  
   * Add Remote Desktop user to ServiceNow user.
   * [Run as a local system account user](https://www.servicenow.com/docs/WkF5asWdDx~knAX_ZxEk7Q "Run Agent Client Collector (ACC) as a local system account to fetch the complete playbook content data for a Windows device.").
   * [Run as a managed group user](https://www.servicenow.com/docs/14SRwQigr3mq9oEKmFxskw "Run Agent Client Collector (ACC) from a managed group account to meet your organization's security, manageability, and auditability requirements.").
   {#install-acc-for-dex-windows__ul_sdm_mwx_12c}
6. Restart the Agent Client Collector service.
7. Verify that the agent registered with your instance and is collecting host data.  
   For details, see [Verify that an Agent Client Collector agent is registered](https://www.servicenow.com/docs/Kt6YZb~JHfQrErAyqvr4Hw "Confirm that an Agent Client Collector (ACC) agent is registered with your ServiceNow instance and is collecting host data. Validate the installation on a single device before deploying to your entire environment.").
**Related tasks**   

* [Create an ACC registration key](https://www.servicenow.com/docs/6tA3pQ39D~DFsAcQNVW2PA "Set up an Agent Client Collector (ACC) by creating an agent registration key to identify and authenticate agents that are enabled to send data to the collector. The key helps promote the security and integrity of the data collected from the system.")
* [Verify that an Agent Client Collector agent is registered](https://www.servicenow.com/docs/Kt6YZb~JHfQrErAyqvr4Hw "Confirm that an Agent Client Collector (ACC) agent is registered with your ServiceNow instance and is collecting host data. Validate the installation on a single device before deploying to your entire environment.")
* [Uninstall the Agent Client Collector agent from a device](https://www.servicenow.com/docs/37OHxGZWlXFHZSL6L3XS6w "Remove the Agent Client Collector (ACC) agent from a device to clean up the device after testing or decommissioning, or to reinstall the agent with different configuration settings.")

*[\>]: and then