Information Centric Tagging Client Deployment using GPO

Products

• Information Centric Security

Issue/Introduction

User wants to know the steps to install information centric tagging (ICT) on multiple machines by using Group Policy.

Resolution

Methods of deployment:

Group Policy supports two methods of deploying an MSI package:

• Assign software - A program can be assigned per-user or per-machine (it will automatically be installed silently)
  • per-user( GPOUser Configuration) it will be installed when the user logs on
  • per-machine(GPOComputer Configuration) then the program will be installed for all users when the machine starts.
• Publish software - After approved the installer will be added to Add or Remove Programs( control panelprogramsget programs) and the user will be able to install it.

Distribution point

The first step in deploying  RightsWATCH through GPO is to create a distribution share on the publishing server. This can be done by following these steps:

• log on to the server as an Administrator user
• create a shared network folder (a deploy share)
• set permissions on this folder in order to allow access to the distribution package(for example: Domain Users Read)
• copy the ICT installer and rw-config.ini to the previously created shared folder

Example: Published per-machine

In this scenario ICT is deployed through a Group Policy Object to all computer in a specific Organizational Unit. to do it, you can follow these steps:

1. Open your domain Group Police Management snap-in.
2. Create a new group policy object and set the name of the policy (for example "ICT Deploy").
3. Edit the group policy object.
4. Select software installation under Computer Configuration/polices/Software Settings/Software Installation.                                                                             
5. Right click on Software Installation and select New/Package.
6. in the Open dialog type the full UNC path of the shared ICT folder.                                                                                                                                                       
7. Select the deployment method you prefer (Published will only be available doing a per-user deployment).
8. Select the RightsWATCH installation you have just created and go to properties, select deployment tab and click advanced and uncheck the deployment options                                                                                                                                                                                                                                                     
9. Link the group policy object to the desired computer Organizational Unit                                                                                                                                            
10. Update the group polices and restart the target computers.

Fell free to discover all the other installers properties, like package upgrades.