Installation through group policy (GPO)

Complete the following steps for GPO deployment.
Prerequisites:
  • Download the agent installer - see steps in section Downloading the installer.
  • Place the installerConfig.json file (Provided by Forcepoint Technical Support??) in the same directory as the MSI file.
  • Domain Admin level access: You need access to the Domain Controller.
  • Admin Access: You must have administrative privileges on the endpoint machine to install the agent.

Steps

  1. Prepare the Installation File: Create a folder on a network-accessible server and place the MSI file there.
  2. Create a Network Share: Share the folder where the agent's MSI file is stored. Assign Read permissions to Domain Computers to make the MSI file available to all domain accounts.
  3. Access the Group Policy Management Console: On your Domain Controller, open the Group Policy Management console. Navigate to your domain under Domains.
  4. Create a Group Policy Object (GPO): Navigate to the Organizational Unit (OU) where you want the software to be installed on every computer.
  5. Right-click on the OU and select Create a GPO in this domain and Link it here.... Name your GPO and click OK.

  6. Configure the GPO: Select the newly created GPO under the OU, right-click, and choose Edit.
  7. Navigate to Computer Configuration > Policies > Software Settings.
  8. Right-click on Software Installation, select New, then click Package.
  9. Browse to the network share location of your MSI file, select it, and click Open.
  10. Assign the Software: Select Assigned and then click OK to ensure the software will be installed automatically on the target machines.
  11. Force Group Policy Update: On the Domain Controller, open the Command Prompt and run the following command to update group policy across all computers immediately: 
    gpupdate /force
  12. Restart Client Machines: To complete the installation, perform a hard reboot on each client machine where the installation is intended. This ensures the new GPO is applied and the software installation is initiated upon start up.