How can I install the Device Management Agent (DMA) on domain-joined computers without admin rights?
In circumstances where a client-to-site VPN does not exist to process/update Group Policy Object (GPO) changes, you cannot install DMA via GPO.
Instead, you can install DMA via email by following the directions provided in the article How do I deploy the Device Management Agent through email?.
This will install DMA in limited mode.
Note: HealthCheck for Office 365 is a module of DMA. When DMA is installed in limited mode, HealthCheck for Office 365 cannot detect and report (in MSPComplete) on upload and download network speeds.