Data Loss Prevention

Dear All,

Im working on Agent Installations and noticed that when the Agents are being oushed through SCCM, AD group policy restricts the Agent to get installed.

The machine has to be removed from the GP and restart, push the agent, re-applu GP and then restart. Is there an easy way out for pushing through SCCM without conflicting group policy.

What I got to know from the SCCM Admin is, the GP policy is not allowing certain registries to be modified.

Things I need to know:

1. What are the registries that are modified while Agent Installation.

2. What files does the Agent copy on the Machine.

3. What folder locations does the Agent need to access.

4. Is there an easy way out for SCCM installations ?

We push our agent out via SCCM and don't have these problems.  This is something fairly specific in your GPO.

Is there a way where we can automate the Windows installation without having AD GP conflicts ?

Create a different group in AD with special security previlages which should allow to make changes in registry. Move the machine group one by one or its better take help from AD and SCCM experts. Earlier using AD and SCCM , we were successful to deploye agents. Also refer below

https://www-secure.symantec.com/connect/forums/dlp-agent-installation-1

https://www-secure.symantec.com/connect/forums/how-install-dlp-agent-client-machines

Kishorilal,

Thanks for the information and links but the information is required like:

1. What are the registries that are modified while Agent Installation.

2. What files does the Agent copy on the Machine.

3. What folder locations does the Agent need to access.

How do I get the answers for them ?