The AirWatch Protection Agent adds endpoint protection to ensure that your Windows Desktop devices remain secure. The agent allows AirWatch to use native Windows features to ensure device security.

By using the AirWatch Protection Agent, you can create profiles for devices to configure native BitLocker, Windows Firewall, and Windows Automatic Updates to your specific settings and preferences.


The AirWatch Protection Agent does not support RT devices, as they have ARM processors and do not support legacy applications. Only Windows 8.1 or Windows 10 devices can use the functionality related to the AirWatch Protection Agent.

AirWatch Protection Agent Installation

After a device enrolls into AirWatch, the AirWatch Protection Agent silently installs on the device if enabled. This installation is automatic and does not require end-user interaction.

For users with a Windows 8.1 and Windows 10 Home device, the AirWatch Protection Agent must be manually installed following installation. End users start the installation by clicking the Web clip that appears on the device desktop. This Web clip only displays if AirWatch Protection Agent is enabled.

Pending Agent Status

While your device is in the Pending Agent status, no profiles, applications, or content push to the device. Profiles already deployed to the device are not removed either. The device is in a quarantine-like state. Once the AirWatch Protection Agent is downloaded and the status changes to enrolled, profiles and other content resume working.

AirWatch Cloud Messaging

AirWatch Cloud Messaging (AWCM) enables real-time policy and command delivery to the AirWatch Protection Agent. Without AWCM, the AirWatch Protection Agent only receives policy and command delivery during its normal check-in intervals set in the AirWatch console. AirWatch recommends using AWCM for real-time policy and command delivery to Windows 8.1 and Windows 10 devices.

AirWatch Protection Agent Settings

The AirWatch Protection Agent offers only one configurable setting. You can set the Data Sample Interval Rate, which controls how often the agent checks in and queries the AirWatch Console for policy violations. Navigate to Groups & Settings > All Settings > Devices & Users > Windows > Windows Desktop > Agent Settings to change the setting.