Installer Windows (Active Directory)¶
As Zercurity comes as an MSI it can be distributed to client machines with an Active Directory GPO (Group Policy Object). Before continuing you must have both Active Directory (AD) installed and a Windows File Server, from which to serve the MSI.
This walkthrough uses Windows Server 2016 Datacenter edition.
From your Windows Server. Open up the Windows Server Manager (which should launch automatically upon login). Select Tools -> Group Policy Management
This will open the Group Policy Management window. Within your organisational structure you can apply GPOs to specific teams within your domain.
In this example however, we’re going to apply our new policy to the entire domain. This will mean that every computer managed under AD domain will have Zercurity installed.
Under your domain right click on Group Policy Objects and from the context menu select New.
Provide a name for your new Group Policy Object. We’ve called ours Zercurity Installer
Click on your newly created GPO. In the right pane on the bottom, under the heading “Security Filtering”. Click on and remove the “Authenticated Users” entry. If you want this program deployed on certain computers, add all of the specific computer names that you want the software to be deployed on. Otherwise, if you want it on all computers, add the group “Domain Computers”.
Go back up to your domain (in the navigation pane) and right-click it. Click “Link an existing GPO”. Click your new GPO’s name and click OK.
Now go back to the GPO under “Group Policy Objects” folder, and right click and select Edit from the context menu.
This will now open the Group Policy Management Editor for our Zercurity Installer GPO.
Under Policies -> Software Settings there’s a tree item called Software installation. right click and select New -> Package from the context menu.
You’ll now need to provide a valid network path for the Zercurity installer.
IMPORTANT The location of
zercurity-2.1.msi must be hosted from an
accessible and readable drive on the network. You can use Window’s File Server
to host the installer.
Accept the default setting of Assigned and click OK.
That’s it. Zercurity will now be installed when a user next logs onto their machine and you’ll see it listed on Zercurity’s Assets page.
If you are testing this on your location computer first. You can force the
installation of Zercurity onto client machines by running the
command. This will cause the system to be restarted as Zercurity is installed
before the user logs in.
gpupdate /target:computer /force
If you need any help. Please raise a ticket via the Zercurity application.
Lastly, you can check the GPO rules using the following command:
gpresult /Scope Computer /v