Distributing the endpoint via GPO (Classic Proxy Connect and Direct Connect)

Note:

See the Neo installation section of the Forcepoint Dynamic User Protection Help for information about distributing the Neo endpoint using Microsoft Endpoint Configuration Manager.

Details below apply to classic Proxy Connect and Direct Connect only.

Follow the steps below to deploy endpoint clients through an Active Directory group policy object (GPO). You need to write different installation scripts for a 32-bit versus a 64-bit operating system. Check in your script to see if the endpoint is installed, because your script should only install the endpoint if it is not already installed.

Steps

  1. Create a shared folder (create a folder and turn on sharing in the Properties menu).
  2. Create a batch file (.bat) in the shared folder, for example “installmsi.bat”. This can be done in any text editor.

    Type the following msiexec command into the batch file and save it.

    msiexec /package "\\path\WebsenseEndpoint.msi" /quiet / norestart WSCONTEXT=xxxx

    Here:
    • path is the path to the installer that you downloaded from the portal
    • xxxx is the unique code noted from the Endpoint Download page in the portal
  3. Test your batch file manually to make sure it runs on other workstations. You can do this by opening the server path to the file on a workstation and attempting to run the file. If the file does not run, check your permissions.
  4. Open the Group Policy Management Console (GPMC).
  5. Create a new (or open an existing) GPO on the organization unit (OU) in which your computer accounts reside. To create a new GPO:
    1. In the console tree, right-click Group Policy Objects in the forest and domain in which you want to create a Group Policy object (GPO).
    2. Click New.
    3. In the New GPO dialog box, specify a name for the new GPO, and the click OK.
  6. Open Computer Configuration > Windows Settings > Scripts, and double- click Startup in the right pane of the screen.
  7. Click Add.
  8. In the Script Name field type the full network path and filename of the script batch file you created in step 2.
  9. Click OK.
  10. Close the GPMC.
  11. Run the gpupdate /force command at the command prompt to refresh the group policy.

Next steps

The application should be installed on startup. The client may not be fully functional until a reboot occurs.