Deploying endpoint protection agents