Data Center Security

Is there way to deploy DCS:SA agents to (100+) servers quickly as I have only seen the automated script to deploy silently via AD script.Not all

have AD scripting or linked to GPO, and i really dont want to copy the agent+ssl cert manually .....

Have the script pull the .ssl file from a share by putting the path to the share

agent.exe /s /v"MANAGEMENT_SERVER=<MangementServer1> ALT_MANAGEMENT_SERVERS=<ALTManagementServers> SSL_CERT_FILE=\\<Share>\agent-cert.ssl -l*v+! %temp%\SISAgentSetup.log /qn"

I know of the script, I was wondering like using a remote deployment tool like Altiris, SCCM, GPO??

Via GPO, you're just looking at using a script of some sort.  You can pop in additional lines to copy the files locally if you want, but that's about it.

Just a simple "Xcopy \\<NetworkLocation>\*.* %temp%" would even do the trick.

Via Altiris, it really depends on the amount of effort you want to put in as there's no native integration for deployment purposes from what I recall.  You can just use the same script, or you could look into using Altiris' own Software Management Solution options to upload and distribute the executable and cert to the Altiris agents' local cache, and provide the installation commands to run.

Thanks, but that doesnt really solve my problem. Customer wants a faster solution as they have over 2000 devices that need to get the agent.

I don't understand what you're asking I'm afraid.  The script and agent switch options are all that come with DCS:SA, it doesn't have any push deployment functionality in it like SEP does.

This means you must look outside of DCS:SA to GPO, Altiris, LANDesk, SCCM and the like.  In which case, your deployment schedule, and how long it takes to accomplish it is determine by that solution, not by DCS:SA.

It's even possible to use PSExec to push the agent out for free if you wanted to, but it's not something I'd usually recommend, and it is still outside the bounds of DCS:SA's functionality.

The tools you've mentioned can all get the agent deployment done, what specifically are you after?  For example, once setup in Altiris, it's possible to send "tickle" packets to Altiris agents to tell them to perform an immediate install, but that is Altiris functionality and not DCS:SA.