Server Management Suite

 View Only
  • 1.  Installing Altiris agent through GPO group policy

    Posted Nov 26, 2015 02:06 PM

    I am trying to install the Altiris Symantec agent through GPO.  I have been told that this is not supported so I am wondering if anyone out there has done this successfully before.

    I created a script that works manually, but doesnt work through GPO.  I am not sure if that is because I am referencing an EXE in the script.  The script doesnt work if I try to use an MSI, mainly because the MSI needs to be transformed and the instructions I found has not done this successfully.

     

    There is info in the forums but I believe most of it is out of date.  Can anyone help me??  Thanks



  • 2.  RE: Installing Altiris agent through GPO group policy

    Posted Nov 26, 2015 08:17 PM

    Best to use this article:Install the Altiris Agent using Active Directory Policies

    You must customize MSI package, located in this folder:

    \\<AltNS>\nscap\Bin\Win32\X86\NS Client Installation

     

    This MSI file must be customized (one time only) using this command: 
    MSIEXEC /a <genuineMSI> NS=”<AltNS>” 

    • Where <GenuineMSI> is AeXNSCInstSvc.msi from the share above 
    • Where <AltNS> is FQDN of target Altiris Notification Server 

     

    You have to create VBS to run that customized MSI from GPO.

     

    I recommend you check if agent is already installed on particular computer.

    Name of that service is AeXNSAgent.exe

    • If service is not running, VBC can start it
    • If service is absent, VBS can initiate installation.

    I hope that helps.



  • 3.  RE: Installing Altiris agent through GPO group policy

    Broadcom Employee
    Posted Dec 07, 2015 09:29 AM

    In ITMS 7.6 release and higher versions, you have "AeXNSCHTTP.exe" or "AeXNSCHTTPs.exe" packages in \\localhost\NSCap\bin\Win32\X86\NS Client Package\ on Notification Server, where they have all required settings to communicate with NS (according to your settings in NS Communication Profile)

    NSCommunicationProfile.jpg

    If you are changing settings in NS Communication profile and this profile is added in "Push Agent" settings, then it will re-generate new "AeXNSCHTTP.exe" or "AeXNSCHTTPs.exe" packages with latest new settings of NS Communication profile.

    Otherwise you will have all required settings in "AeXNSCHTTP.exe" or "AeXNSCHTTPs.exe" packages and can use silent installation mode of SMA on client PC, without adding additional parameters for agent installation.

    "AeXNSCHTTP.exe /s" = you will have SMA installed on client PC in silent mode, which will be registered with specified NS and use agent settings as they are set in "Communication Profile".

    Thanks,

    IP.



  • 4.  RE: Installing Altiris agent through GPO group policy

    Posted Dec 07, 2015 09:38 AM

    Thank you for your assistance i have managed to resolve this.  It turns out I did not have to transform to MSI.  I used Schedule Tasks in GPO to push out the script.  Biggest problem was UAC but managed to get around it.  Thanks again for the help



  • 5.  RE: Installing Altiris agent through GPO group policy

    Posted Dec 08, 2015 09:50 AM

    Be aware that NS Client Package folder now contains multiple EXE's, which makes SMA Upgrade Package larger than it used to be before:

    https://www-secure.symantec.com/connect/articles/symantec-management-agent-76-large-package-size