Todyl Agent Manager

Purpose

This solution deploys and removes Todyl SGN Connect across Windows and Mac devices in NinjaOne.

Use one control field, cPVAL Todyl Deployment, to choose the action and target device type. The related compound conditions then run the correct automation automatically.

For protected endpoints, uninstallation can use cPVAL Todyl Tamper Protection and cPVAL Todyl Maintenance Key so removals complete safely.

Associated Content

Custom Fields

Name	Default	Level	Function
cPVAL Todyl Deployment	`Disabled`	Org, Loc, Dev	Controls the deployment action. Select a target OS to install, or `Uninstall` to remove the agent.
cPVAL Todyl Desktop Policy Key	-	Org, Loc, Dev	Todyl deployment key for Windows Desktop devices.
cPVAL Todyl Laptop Policy Key	-	Org, Loc, Dev	Todyl deployment key for Windows Laptop devices.
cPVAL Todyl Server Policy Key	-	Org, Loc, Dev	Todyl deployment key for Windows Servers.
cPVAL Todyl Mac Policy Key	-	Org, Loc, Dev	Todyl deployment key for Mac devices.
cPVAL Todyl Tamper Protection	-	Org, Loc, Dev	Indicates whether tamper protection is active on the endpoint. When enabled, the uninstall scripts use the maintenance key.
cPVAL Todyl Maintenance Key	-	Org, Loc, Dev	The maintenance key used to disable tamper protection during uninstallation.

Deployment Options

The cPVAL Todyl Deployment dropdown determines which devices are targeted and what action is taken:

Option	Effect
`Disabled`	No action taken. Existing installations remain unchanged.
`All`	Deploys Todyl to all supported Windows and Mac devices in scope.
`Windows`	Deploys Todyl to all Windows devices (Workstations and Servers) in scope.
`Windows Servers`	Deploys Todyl only to Windows Server devices in scope.
`Windows Workstations`	Deploys Todyl only to Windows Workstation devices in scope.
`Mac`	Deploys Todyl only to Mac devices in scope.
`Windows Workstations and Mac`	Deploys Todyl to Windows Workstations and Mac devices only.
`Uninstall`	Removes Todyl from all devices in scope where it is currently installed.

Set this field at Organization level for broad rollout, then override at Location or Device level when needed.

Automations

Name	OS	Function
Todyl Deployment [Windows]	Windows	Installs or updates SGN Connect on Windows devices.
Todyl Deployment [Macintosh]	macOS	Installs or updates SGN Connect on Mac devices.
Todyl Uninstall [Windows]	Windows	Removes SGN Connect from Windows devices.
Todyl Uninstall [Macintosh]	macOS	Removes SGN Connect from Mac devices.

Compound Conditions

Name	Target	Function
Todyl Deployment [Windows Workstations]	Windows Workstations	Triggers Todyl Deployment [Windows] when deployment is enabled for workstations.
Todyl Deployment [Windows Servers]	Windows Servers	Triggers Todyl Deployment [Windows] when deployment is enabled for servers.
Todyl Deployment [Macintosh]	macOS	Triggers Todyl Deployment [Macintosh] when deployment is enabled for Mac devices.
Uninstall Todyl [Windows Workstations]	Windows Workstations	Triggers Todyl Uninstall [Windows] when uninstall is enabled for workstations.
Uninstall Todyl [Windows Servers]	Windows Servers	Triggers Todyl Uninstall [Windows] when uninstall is enabled for servers.
Uninstall Todyl [Macintosh]	macOS	Triggers Todyl Uninstall [Macintosh] when uninstall is enabled for Mac devices.

Implementation

Step 1: Create custom fields

Create these fields first:

Step 2: Create automations

Create these automations:

Step 3: Create compound conditions

Create these compound conditions:

Step 4: Add policy keys

Populate policy-key fields before enabling deployment:

Set cPVAL Todyl Desktop Policy Key for Windows Desktop machines.
Set cPVAL Todyl Laptop Policy Key for Windows Laptop machines.
Set cPVAL Todyl Server Policy Key for Windows Servers.
Set cPVAL Todyl Mac Policy Key for Mac devices.

Step 5: Enable the solution

Set cPVAL Todyl Deployment to the option you want (All, Windows, Windows Servers, Windows Workstations, Mac, Windows Workstations and Mac, or Uninstall).

You'll know it worked when the matching deployment or uninstallation automation runs for the target device type.

FAQs

Q. What does this solution do?

A: It manages Todyl SGN Connect lifecycle tasks in NinjaOne: install, update, and uninstall across supported Windows and Mac devices.

Q. What turns the solution on?

A: cPVAL Todyl Deployment is the control field. The selected option decides which devices are targeted and which action runs.

Q. Which value should I choose for broad deployment?

A: Use All to deploy to both Windows and Mac. Use Windows for all Windows devices only. Use Mac for Mac-only rollout.

Q. Can I deploy only to servers or only to workstations?

A: Yes. Use Windows Servers to target only servers, or Windows Workstations to target only workstations.

Q. How do I remove Todyl from devices?

A: Set cPVAL Todyl Deployment to Uninstall. Matching uninstall compound conditions will run automatically.

Q. When do I need the maintenance key?

A: You need it when tamper protection is enabled. Set cPVAL Todyl Tamper Protection, then store the key in cPVAL Todyl Maintenance Key.

Q. What if policy key fields are blank?

A: Deployment will fail for affected devices. Add the right keys before rollout:

Q. Where should I set values: Organization, Location, or Device?

A: Start at Organization for standard behavior. Use Location or Device to create exceptions.

Q. How can I confirm the solution is working?

A: Check recent automation activity in NinjaOne. You should see the matching deployment or uninstall automation run for each targeted device type.

Q. Does this support both Windows and Mac in one solution?

A: Yes. The same solution supports both platforms through separate automations and compound conditions.

Q. Is this solution safe for security-focused environments?

A: Yes. It supports tamper-protected uninstall workflows using maintenance-key validation when required.

Changelog

2026-06-22

Added support for Mac machines: introduced Todyl Deployment [Macintosh] and Todyl Uninstall [Macintosh] automations.
Added cPVAL Todyl Mac Policy Key custom field to store the Todyl deployment key for Mac devices.
Added cPVAL Todyl Tamper Protection and cPVAL Todyl Maintenance Key custom fields to support safe uninstallation when tamper protection is active on an endpoint.
Updated cPVAL Todyl Deployment dropdown to include Mac, All, and Windows Workstations and Mac options.
Improved Windows deployment and uninstallation reliability.
Split compound conditions into dedicated rules by device type and action.
Added Compound Condition: Todyl Deployment [Macintosh] and Compound Condition: Uninstall Todyl [Macintosh].

2026-05-20

Initial version of the document.

Purpose​

Associated Content​

Custom Fields​

Deployment Options​

Automations​

Compound Conditions​

Implementation​

Step 1: Create custom fields​

Step 2: Create automations​

Step 3: Create compound conditions​

Step 4: Add policy keys​

Step 5: Enable the solution​

FAQs​

Q. What does this solution do?​

Q. What turns the solution on?​

Q. Which value should I choose for broad deployment?​

Q. Can I deploy only to servers or only to workstations?​

Q. How do I remove Todyl from devices?​

Q. When do I need the maintenance key?​

Q. What if policy key fields are blank?​

Q. Where should I set values: Organization, Location, or Device?​

Q. How can I confirm the solution is working?​

Q. Does this support both Windows and Mac in one solution?​

Q. Is this solution safe for security-focused environments?​

Changelog​

2026-06-22​

2026-05-20​