Install Endpoint Agents for Windows via Group Policy


  • A shared network drive

  • Endpoint agent accessible via installed network drive

  • Ability to create Group Policy Objects in Active Directory



It is recommended to not create a single GPO to join multiple configurations, mainly for user flexibility. You can easily upgrade a GPO geared towards IE without editing Google Chrome GPO, or vice--versa.

This documentation was done under Windows Server 2012

MSI Installer via GPO

  1. Open up Group Policy Management

  2. Create a group policy with the appropriate name. In this example, we will use “TE-Endpoint-Agent_MSI_Installer”

  3. Right-click the newly created GPO and select Edit

  4. Expand till you reach: Computer Configuration\Policies\Software Settings\Software Installation

  5. Right click the right-pane and select “New > Package”

  6. Navigate to your network share where the installer is available for all users

  7. Double Click the MSI file

  8. On the “Deploy Software” window, leave the selection of “Assigned” and click Ok

If you run into the message “There is no software installation data object in the Active Directory” please verify that your file permissions on the network share are setup properly.

To instructions to install the Browser Extensions via the GPO, refer here.

Last updated