Here is a PowerShell script that downloads the Cyber Fox DNS client and deploys it using the Company ID as a variable:

# Copyright (c) 2026 CyberFOX LLC
# All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
#    * Redistributions of source code must retain the above copyright
#      notice, this list of conditions and the following disclaimer.
#    * Redistributions in binary form must reproduce the above copyright
#      notice, this list of conditions and the following disclaimer in the
#      documentation and/or other materials provided with the distribution.
#    * Neither the name of the AutoElevate nor the names of its contributors
#      may be used to endorse or promote products derived from this software
#      without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
# DISCLAIMED. IN NO EVENT SHALL OPENDNS BE LIABLE FOR ANY DIRECT, INDIRECT,
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
# OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
# NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
# EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
<#
.SYNOPSIS
  Installs the CyberFOX DNS Filter
  #>

# Run powershell in a clean install
# PowerShell -ExecutionPolicy Bypass

# Set $DebugPrintEnabled = 1 to enabled debug log printing to see what's going on.
$DebugPrintEnabled = 1
# Replace ENTER COMPANY ID HERE with the actual Company ID from the Company, Location, or Roaming Device
$companyID = "ENTER COMPANY ID HERE"
#Installation Variables - Do Not Modify
$InstallerName =  "dns-latest.exe"
$InstallerPath = Join-Path $Env:TMP $InstallerName
$DownloadBase = "https://cdn.passwordboss.com/dns-client"
$DownloadURL = $DownloadBase + "/production/" + $InstallerName
$ScriptFailed = "CyberFOX DNS Filter agent failed to install"
$ServiceName = "CyberFOX DNS over HTTPS Service"
# Logging Variables - Do Not Modify
$LogBaseName = "DNSFilterInstall.log"
$LogStamp    = Get-Date -Format "yyyy-MM-dd_HHmmss"
$LogFileName = "${LogBaseName}_${LogStamp}"
$LogFilePath = Join-Path $Env:TEMP $LogFileName

function Get-TimeStamp {
    return "[{0:MM/dd/yy} {0:HH:mm:ss}]" -f (Get-Date)
}

function Confirm-ServiceExists ($service) {
    if (Get-Service $service -ErrorAction SilentlyContinue) {
        return $true
    }
    
    return $false
}

function Debug-Print ($msg) {
    if ($DebugPrintEnabled -eq 1) {
        Write-Host "$(Get-TimeStamp) [DEBUG] $msg"
    }
}

function Get-Installer {
    Debug-Print("Downloading installer...")
    $WebClient = New-Object System.Net.WebClient
    
    try {
        $WebClient.DownloadFile($DownloadURL, $InstallerPath)
    } catch {
        $ErrorMessage = $_.Exception.Message
        Write-Host "$(Get-TimeStamp) $ErrorMessage"
    }
    
    if ( ! (Test-Path $InstallerPath)) {
        $DownloadError = "Failed to download the CyberFOX DNS Filter Client Installer from $DownloadURL"
        Write-Host "$(Get-TimeStamp) $DownloadError"
        throw $ScriptFailed
    }
    
    Debug-Print("Installer downloaded to $InstallerPath...")
}

function Install-Agent () {
    Debug-Print("Executing installer...")

    $LogArgument = "/LOG=`"$LogFilePath`""

    $Arguments = "/SP- /SUPPRESSMSGBOXES /VERYSILENT /NORESTART /COMPANY_ID=$companyID $LogArgument"

    #Debug-Print("Installer arguments: $Arguments")
    Debug-Print("Installer log path: $LogFilePath")

    Start-Process $InstallerPath -ArgumentList $Arguments -Wait
}
		
function Verify-Installation () {
    Debug-Print("Verifying Installation...")
    
    if ( ! (Confirm-ServiceExists($ServiceName))) {
        $VerificationError = "The CyberFOXDNSAgent service is not running. Installation failed!"
        Write-Host "$(Get-TimeStamp) $VerificationError"
        
        throw $ScriptFailed
    }
}

function Cleanup-Installer () {
Debug-Print("Removing Installation Files...")

Remove-Item $downloadPath
}

function main () { 
Debug-Print("Checking for Company ID...")
    
    if ($companyID -eq "ENTER COMPANY ID HERE" -Or $LICENSE_KEY -eq "") {
        Write-Warning "$(Get-TimeStamp) LICENSE_KEY not set, exiting script!"
        exit 1
    }
	
	Write-Host "$(Get-TimeStamp) CompanyID: " $companyID
	
    Get-Installer
    Install-Agent
    Verify-Installation
	Cleanup-Installer
    
    Write-Host "$(Get-TimeStamp) CyberFOX DNS Filter Client successfully installed!"
}

try
{
    main
} catch {
    $ErrorMessage = $_.Exception.Message
    Write-Host "$(Get-TimeStamp) $ErrorMessage"
    exit 1
}

DNS_Deploy_2026.ps1

Instructions:

1. Replace ENTER COMPANY ID HERE with the actual Company ID from the Company, Location, or Roaming Device.
    
2. Save the script as a .ps1 file.
    
3. Run the script on the target machine in an elevated PowerShell.
    

This script will download the latest Cyber Fox DNS client, install it using the specified Company ID, and then clean up the downloaded file. You can modify and use this example script in the RMM or deployment tool of your choice. 

To install the Cyber Fox DNS roaming client via Intune, follow these steps:

IntuneWinAppUtil.exe -c <source_folder> -s dns_client_[Company ID Here].exe -o <output_folder>

Using the Location Specific installer:
dns_client_[locationkeyhere].exe /SP- /SUPPRESSMSGBOXES /VERYSILENT /NORESTART

Using the Generic Installer
dns-latest.exe /SP- /SUPPRESSMSGBOXES /VERYSILENT /NORESTART /COMPANY_ID=[company id]