Deploying Endpoint Agents using Group Policy Objects.

Windows Servers allow the use of Active Directory to deploy software and policies to Endpoints. A Group Policy is a set of rules provided by a server that tell the client machines in the network how to behave in certain situations.  Group Policy can be used to deploy software or administrative rules across the network without having to physically touch each machine individually.

The individual rules made and used in Group Policy are called Group Policy Objects (GPO). A server administrator may find it easier to create a GPO to deploy the Endpoint Agent to a group of machines at once, instead of one at a time.

To install the Endpoint Agent via GPO, select Create Agent Installer in the Console and then save this MSI to your share. e.g.

\\file server\share\InstallerName.msi

This installer needs to be launched with /qn to install silently. e.g.

\\file server\share\InstallerName.msi /qn

Once you have created the installer:

  1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers
  2. In the console tree, right-click your domain, and then click Properties.
  3. Click the Group Policy tab, and then click New.
  4. Type a name for this new policy (for example, Office XP distribution), and then press Enter.
  5. Click Properties, and then click the Security tab.
  6. Clear the Apply Group Policy check box for the security groups that you don't want this policy to apply to. 
  7. Select the Apply Group Policy check box for the groups that you want this policy to apply to.
  8. When you are finished, click OK.

For more information on Group Policy visit http://support.microsoft.com/kb/816102