search cancel

Can I deploy the Endpoint Agent using Active Directory Group Policy Objects (GPO)?


Article ID: 159641


Updated On:


Data Loss Prevention Endpoint Prevent Data Loss Prevention Endpoint Discover


How can I deploy the Endpoint Agent using Active Directory?


Relevant versions:  8.0 and up

You can create an .MST file for use with Active Directory GPO to deploy the EndPoint Agent.  Instructions for creating the .MST file using ORCA are as follows:

  • Right click the AgentInstall.msi; select Edit with Orca
  • Choose Transform menu -> New Transform
  • Select the Property table
  • Select Table menu -> Add Row…
  • Type ENDPOINTSERVER for the property name
  • For the "value" field, enter the hostname or IP address of the Endpoint Monitor
    (add/change other properties as necessary…) 
  • Click Transform -> Generate Transform 
  • Select a filename and save the file

To perform a test install on the local machine using the generated MST file, use the following command:

msiexec /i AgentInstall.msi TRANSFORMS=mytest.mst /q