Windows Agent Deployment best Practise

Hi, we want to install the Icinga Agent on 400 Windows Servers. What is the best and easiest way to achieve that? We read about the Powershell Module, but thinks it’s unsafe to publish an address for the Icinga director. We were thinking about deploy the Agent with the Software Deployment tool (SCCM) and then somehow exchange the key with a PS Script?! Does anyone have experience? Thanks!