Install the silent agent on company machines.
The silent agent is installed by the company and runs on its own: no window, no per-machine setup. One installer serves your whole fleet because your company key travels inside it.
Get your installer
Sign in as an owner or admin, open Settings, then Add people, and choose "You install it for them". The installer download there is keyed to your company. The same page shows the exact Terminal one-liner, which is the rename-proof route, and the flags an MDM push needs.
Install
Double-click the installer on the machine, or run the Terminal command from the Add people page. On managed fleets, push the same package through your MDM. The agent starts at login, captures per your company's settings, and has no user interface on purpose.
Approve the machine
A newly installed machine does not appear on reports or your bill by itself. It shows up in Settings, Add people, under "Waiting for you", where you approve it and name the person it belongs to in one step. A machine you do not recognise can be denied, which erases everything it recorded. This is deliberate: someone forwarding your installer can never quietly add seats to your bill.
Removing it later
The uninstall command is printed beside the install steps on the same page, and the uninstaller also travels inside every installed copy. Removal is gated on your company key.