Installing Agents Using a Logon Script

For important installation parameters, see Agent Installation Command Prompt Parameters.

  1. Download the agent installer. See Downloading Agent Setup EXE.
  2. Copy the Setup EXE file to a shared folder accessible to users.
  3. Use a text editor like Notepad to create a logon script that runs Setup EXE after the endpoint logs on to the domain.
    Note:

    Trend Micro recommends using a script that detects existing installations of Endpoint Application Control. To do this, the following example looks for the registry entry HKLM\SOFTWARE\TrendMicro\Endpoint Application Control Agent.

    For example, if your Endpoint Application Control server is located at 10.10.10.42 on the default Apache HTTPS port, and the 32-bit and 64-bit installers are copied to your shared network folder at \\filesrv-01\admin\installers, to install Endpoint Application Control using the appropriate Windows architecture with default settings, use the following script:

    :CheckAnyInstallExists

    REG QUERY "HKLM\SOFTWARE\TrendMicro\Endpoint Application Control Agent"

    IF %ERRORLEVEL% EQU 1 GOTO CheckOS

    GOTO END

    :CheckOS

    IF EXIST "%PROGRAMFILES(X86)%" (GOTO 64BIT) ELSE (GOTO 32BIT)

    :64BIT

    \\filesrv-01\admin\installers\AcAgentSetup_x64.exe ServerHost=https://10.10.10.42:4343

    GOTO END

    :32BIT

    \\filesrv-01\admin\installers\AcAgentSetup_x86.exe ServerHost=https://10.10.10.42:4343

    GOTO END

    :END

    After installation, the Endpoint Application Control system tray icon appears on the endpoint.

    Figure 1. The System Tray Icon