Deploying an MSI Package Using Active Directory

Take advantage of Active Directory features to deploy the MSI package simultaneously to multiple agent endpoints.

For instructions on creating an MSI file, see Installing with Agent Packager.

  1. Perform the following:
    • For Windows Server 2003 and earlier versions:

      1. Open the Active Directory console.

      2. Right-click the Organizational Unit (OU) where you want to deploy the MSI package and click Properties.

      3. In the Group Policy tab, click New.

    • For Windows Server 2008 and Windows Server 2008 R2:

      1. Open the Group Policy Management Console. Click Start > Control Panel > Administrative Tools > Group Policy Management.

      2. In the console tree, expand Group Policy Objects in the forest and domain containing the GPO that you want to edit.

      3. Right-click the GPO that you want to edit, and then click Edit. This opens the Group Policy Object Editor.

    • For Windows Server 2012:

      1. Open the Group Policy Management Console. Click Server Management > Tools > Group Policy Management.

      2. In the console tree, expand Group Policy Objects in the forest and domain containing the GPO that you want to edit.

      3. Right-click the GPO that you want to edit, and then click Edit. This opens the Group Policy Object Editor.

  2. Choose between Computer Configuration and User Configuration, and open Software Settings below it.
    Tip:

    Trend Micro recommends using Computer Configuration instead of User Configuration to ensure successful MSI package installation regardless of which user logs on to the endpoint.

  3. Below Software Settings, right-click Software installation, and then select New and Package.
  4. Locate and select the MSI package.
  5. Select a deployment method and then click OK.
    • Assigned: The MSI package is automatically deployed the next time a user logs on to the endpoint (if you selected User Configuration) or when the endpoint restarts (if you selected Computer Configuration). This method does not require any user intervention.

    • Published: To run the MSI package, inform users to go to Control Panel, open the Add/Remove Programs screen, and select the option to add/install programs on the network. When the OfficeScan agent MSI package displays, users can proceed to install the OfficeScan agent.