Installing Dr.Web Agent Software via Active Directory |
If the service is used in the LAN, you can remotely install the anti-virus Agent on workstations using this service.
Dr.Web Agent Installation To install the Agent using the Active Directory 1.Download a copy of Dr.Web Agent installer for networks with at https://download.drweb.com/. 2.Install Dr.Web Agent on the local network server supporting the service. This can be made in the command line mode or in the graphic mode of the installer .
(A) To Set All Necessary Installation Parameters in the Command Line Mode Issue the following command with all necessary parameters and the obligatory parameter /qn which disables the graphic mode: msiexec /a <package_name>.msi /qn [<parameters>] The /a parameter launches installation of the administrative package. The name of the installation package for the Agent through Active Directory usually has the following format: drweb-11.05.4-<build>-esuite-agent-activedirectory.msi /qn—disable the graphic mode. With this switch the following parameters are to be specified: •ESSERVERADDRESS=<DNS_name>—set the address of Dr.Web Server to which the Agent is to be connected. For the possible formats see the document, p. Appendix E. •ESSERVERPATH=<full_filename>—specify the full path to the certificate of the Server and the file name (by default drwcsd-certificate.pem in the webmin/install subfolder of the Server installation folder). •TARGETDIR—the network folder for the Agent image (modified installation package), which will be select via the Group Policy Object Editor for the selected installation. This folder must have read and write access. The path should be given in the network addresses format even if the folder is a locally accessible resource; the folder should be accessible from the target stations.
These parameters can alternatively be set in the graphic mode of the installer. Next on a local network server, where Active Directory administrative tools are installed, appoint installation of the package (see procedure below). (B) To Set All Necessary Installation Parameters in the Graphic Mode
1.Issue the command
2.An window with information on the program selected for installation will be opened. Click .
3.In the next window, specify the DNS name (preferred form) or the IP address of Dr.Web Server (see the document, p. Appendix E). Specify the location of the public key file of the Server (drwcsd.pub). Click . 4.In the next window type the name of a network catalog, to which the image of the Agent is planned to be written. The path should be specified in the network addresses format even if the catalog is a locally accessible resource; the catalog should be accessible from the target stations. Click . 5.After installation is finished, the settings window displays which helps you configure installation of the package on network workstations. Installation of the Package on Selected Workstations 1.In (or in the menu for Windows 2003/2008/2012/2012R2 Server OS, in the menu for the Windows 2000 Server OS), select (when you install Agent in the graphic mode, this window displays automatically). 2.In the domain containing the computers on which Dr.Web Agents are to be installed, create an organizational unit (hereinafter OU), name it, for example, ESS. To do this, in the domain context menu, select . In the opened window, type the new unit name and click . Include the computers, on which the Agent is to be installed, into this unit. 3.Open the group policy editor. To do this: a)for Windows 2000/2003 Server OS: on the OU context menu, select . In the opened window go to the tab. b)for Windows 2008 Server OS: select . 4.For the created OU, set the group policy. To do this: a)for Windows 2000/2003 Server OS: click and create an element named ESS policy. Double-click it. b)for Windows 2008/2012/2012R2 Server OS: on the OU context menu, select . In the opened window, specify the name of the new group policy object and click . In the new group policy context menu, select . 5.In the window, specify the settings for the group policy created on step 4. To do this: a)for Windows 2000/2003 Server OS: in the hierarchical tree, select . b)for Windows 2008/2012/2012R2 Server OS: in the hierarchical tree, select . 6.On the context menu of , select . 7.Specify the Agent installation package. To do this, specify the address of the network shared resource which contains the Agent image you created during the administrative installation. The path should be specified in the network addresses format even if the catalog is a locally accessible resource). Click . 8.A window will be opened. Select the option. Click . 9.In the window, select the added package. On the context menu of this element, select . 10.In the opened package properties window, select the tab. Click the button. 11.An window will be opened. •Set the flag. •If you plan to install Dr.Web Agent via the customize msi package on 64-bit OS, set the flag. 12.Click twice. 13.Dr.Web Agent will be installed on selected computers at their next registration in the domain. Policies Assignment in Consideration of Previous Agent Installations When you assign an Active Directory policy to install the Agent, you should consider a possibility, that the Agent is already installed at the station. There are three possible options: 1.. After policies assignment, the Agent will be installed by general rules. 2.. After Active Directory policy assignment, installed Agent will remain at the station.
To install the Agent via the Active Directory, you must uninstall the Agent manually (or via the Control Center) and assign the Active Directory policy for this station repeatedly. 3.. Repeated assignment of a policy to a stations with Dr.Web Agent installed via the Active Directory service is not performed. Thus, policies assignment will not take any affect to the anti-virus software state at the station. |