Asset discovery helps IT teams maintain accurate, up-to-date visibility into your organization’s IT landscape without relying on manual tracking. Atomicwork automatically ingests hardware and software data into a unified, accurate, and actionable asset inventory that supports:
Faster incident and request resolution
Reliable asset lifecycle tracking
Robust device-based automations
Asset discovery works through Lansweeper across modern, distributed environments alongside integrations with Kandji, Intune, Jamf, and Microsoft Azure.
Asset discovery sources
Atomicwork supports two types of asset discovery sources — agents and scanners. You can use either or both sources, depending on your organization’s requirements.
Agents
Agents are installed directly on end-user devices and collect inventory and configuration data specific to that device.
By default, agents operate in endpoint-only mode and do not discover other devices on the connected network.
They collect information like:
Device info: Hostname, serial number, device ID, MAC address, domain name
OS: Operating system name and version, build number, service pack
Hardware: Manufacturer and model, CPU, RAM, memory and disks, BIOS and baseboard details, battery, connected USB devices, and displays
Software: Installed apps and versions (including publishers and install dates), Microsoft/App Store apps, OS features, Antivirus and security software
System configuration: Drivers, autorun entries, services, certificates, shares, performance metadata
User and device context: Currently logged-in user, last seen, system uptime, local users and groups, domain, SID, UPN
Network: Internal IP address, network adapter configuration
Warranty: Available for supported vendors including Dell, Lenovo, Fujitsu, Toshiba
Agents do not monitor user behaviour or activity, and do not collect:
Keystrokes
Screen captures
File contents
Browser history
Network traffic content
Personal data outside of device inventory and configuration
Note: Some organizations choose an agent-only deployment where agents run in their default endpoint-only configuration and network scanners are not enabled.
Scanners
Scanners are installed on a designated device within a network and are used to discover shared infrastructure, such as printers, switches, routers and other non-endpoint devices.
Scanners need to be separately installed from agents, and typically require only one deployment per network.
Scanners use common network discovery methods such as subnet discovery, ARP scans, and DNS lookups, to identify devices on the local network of the host device. They collect inventory information similar to agents.
Setting up asset discovery
To set up or manage asset discovery, navigate to Settings > Assets and click on Start Discovery or Manage in the Discover assets card.
Creating a site
A site is a logical grouping of assets based on physical or organizational structure. It could represent an office location (e.g., San Francisco office), a department (e.g., HR), or even a subnet/IP range.
Sites help structure how scanners and agents are deployed across networks. For example, if multiple teams manage different regions, you can create separate sites per region.
To create a site:
Click on the + icon next to Sites.
Enter a name for the site. The region defaults to your Atomicwork platform's region but can be changed if needed.
Click on Create.
After a site is created, you can download either a scanner or an agent, depending on your discovery needs.
Note: Ideally, only one scanner is needed per network to supplement discovery of networked assets. Ensure all end user devices have an agent installed for deeper visibility and smoother onboarding.
Dowloading and deploying agents
To deploy a discovery agent on end-user devices:
Navigate to your site and click on Download.
Choose Agent as the download type and then select the OS (Windows, macOS, or Linux).
Once the installer file has been downloaded, you can distribute it to end user devices via MDM tools (Kandji, Intune, Jamf), remote access tools like AnyDesk or share the file for manual installation.
Here's how you can distribute the agent via MDMs:
Via Microsoft Intune (Windows & macOS)
For Windows devices:
Navigate to Microsoft Intune Admin Center > Devices > Scripts > Add
Choose Windows 10/11 > PowerShell script
Upload the downloaded
.ps1file (e.g.,install_agent.ps1)Configure the following:
Run as admin: ✅ Yes
Execution context: System
Retry if failed: Optional
Assign the script to appropriate device or user groups
For macOS devices:
Navigate to Devices > macOS > Shell Scripts
Upload the downloaded file:
atomicwork_installer_agent.shSet the script to run as root/system
Via Kandji (only macOS)
Go to Library > Add New > Custom Script
Paste or upload the script from the
atomicwork_installer_agent.shfileAssign the script to a Blueprint
Via Jamf (only macOS)
Go to Jamf Pro > Computers > Scripts
Add a new script named Install Atomicwork Agent
Upload the
atomicwork_installer_agent.shfile or paste the scriptCreate a new Policy and configure the following:
Trigger: Enrollment Complete (or a custom trigger)
Payload: Scripts
Target: Define the device scope
Downloading and deploying scanners
To scan shared infrastructure (e.g., switches, printers):
Navigate to your site and click on Download.
Choose Scanner as the download type and then select the OS (Windows, macOS, or Linux).
Install the scanner on a device connected to the network you want to scan. This can be a virtual machine or any host system.
The scanner will detect and report all devices visible on the network.
Viewing sources and discovered assets
Once agents or scanners are installed:
Navigate to Settings > Assets > Discover assets to see all active sources (agents/scanners) under each site.
Discovered devices will begin appearing in the Assets page.
Asset data refreshes automatically every 24 hours.
Privacy, security, and control
Asset discovery in Atomicwork is designed to be transparent and administrator-controlled:
Discovery sources are explicitly installed and managed by IT
Agents default to endpoint-only inventory collection
Network scanners and additional visibility features are optional
Customers control where, how, and whether discovery sources are enabled
This allows organizations to align asset discovery with internal security policies, regional privacy requirements, and employee expectations.
The agents and scanners are downloaded with their standard product branding and cannot currently be white-labeled or renamed. Any system notifications or installer messages may reference the underlying technology used by Atomicwork.
Need help?
If you need assistance deploying agents, configuring scanners, or interpreting asset data, reach out to your Customer Success Manager or write to us via support.atomicwork.com.
FAQs
Does the agent monitor what I do on my laptop/computer?
No. The agent does not track user activity of any kind including keystrokes, screen content, files, or browser history. It collects device inventory and configuration data only.
Does the agent scan my home or office network?
No. By default, agents run in endpoint-only mode and collect data only from the device they are installed on.
What's the difference between agent-only and agent + scanner deployments?
In an agent-only deployment, only end-user devices report their own inventory. Apart from the internal IP address and network adapter configuration, no network information is collected.
In an agent+ scanner deployment, scanners are used to discover shared network devices like printers and switches, in addition to end-user devices, and record their inventory information.
Are scanners required for asset discovery?
No. Scanners are optional and installed separately. Some organizations use agents only, especially for remote or distributed teams.
Does the agent run in the background?
Yes. The agent runs as a background service to keep device information up to date.