What's new

The first open source release of the Windows Reporting Agent.

Release 3.2 October 2026

Release 3.2 turns an in-house tool, written for a deployment of 120 laptops, into a package anyone can install.

• Signed uploads: each computer registers a certificate for a non-exportable machine key before it sends anything, and every report is signed. The server checks the signature, the approval state, the time and a one time nonce.
• Admin page: approve, revoke and delete computers and reports, with a login and CSRF protection. It replaces the old remove page, which had no login.
• Enrollment token: optional automatic approval for large rollouts.
• Settings file: every setting is in windows_reporting_agent.ini instead of the program code. The service reads it before each report.
• More delivery methods: a Windows file share (CIFS) and SCP, alone or next to HTTPS.
• Installer: a 64-bit setup.exe with server settings pages and command line switches for silent installs, upgrades that keep the settings, a restart-on-failure service, and an agent data folder limited to SYSTEM and Administrators.
• Fleet status pages: status.php and report.php check every computer's last report for late check-ins, old Windows updates, Defender problems, and required and unwanted programs, with a live demo on a sample fleet.
• Server install script: install_server.sh sets up the PHP pages, .htaccess, admin login and data folder, with a dry run first.
• Fixes: the Defender alert query now only returns the last 30 days (critical and error events from all time were included before); HTTP errors from the server are reported instead of counted as success; WinINet errors show their message.
• Defaults: the report and log moved from C:\ to C:\ProgramData\WindowsReportAgent.