Installing with Remote Install

Install the Security Agent remotely to one or several endpoints connected to the network.

To install with Remote Install, the following are required:

Item to Check


Target endpoint

  • Use an administrator account to log on to each target endpoint.

    • If the target endpoint runs Windows 7, enable the built-in administrator account first. Windows 7 disables the built-in administrator account by default.

      For more information, refer to the Microsoft support site (

    • When performing remote installation on Windows 8/8.1 or 10, the Microsoft account cannot be used to login to the target client

  • The target endpoint must not have the Security Server installed. Remote Install does not install the Security Agent on an endpoint already running the Security Server.

File and Printer Sharing

On the endpoint, temporarily enable File and Printer Sharing.


If the company security policy is to disable Windows Firewall, skip to the Remote Registry section.

  1. Open Windows Firewall in the Control Panel.

  2. Click Allow a program through Windows Firewall. If you are prompted for an Administrator password or confirmation, type the password or provide confirmation. The Windows Firewall Settings window appears.

  3. Under the Program or port list in the Exceptions tab, make sure the File and Printer Sharing check box is selected.

  4. Click OK.

  5. If required, return to the original settings after installing Security Agents.

User Account Control

Disable User Account Control.


Modify the following registry key to turn off User Account Control: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] “EnableLUA”=dword:00000000.

If required, return to the original settings after installing Security Agents.

Remote Registry

Temporarily start the Remote Registry service.

  1. Note:

    Type services.msc in the Run window to open Microsoft Management Console.

  2. Right-click Remote Registry and select Start.

  3. If required, return to the original settings after installing Security Agents.


A dual-stack Security Server can install the Security Agent to any endpoints. A pure IPv6 Security Server can only install the Security Agent to pure IPv6 or dual-stack endpoints.

  1. Go to Devices.
  2. Click Add Devices.
  3. Select Desktop or Server, from the Computer Type section.
  4. Select Remote Install, from the Method section.
  5. Click Next.

    A new screen appears.

  6. From the list of clients in the Groups and Computers box, select a client, and then click Add. A prompt for a user name and password to the client appears.
  7. Type your user name and password, and then click Login. The client appears in the Selected Computers list box.
  8. Repeat these steps until the list displays all the clients in the Selected Computer list box.
  9. Click Install.

    A confirmation box appears.

  10. Click Yes to confirm that you want to install the agent to the clients.

    A progress screen appears as the program copies the Security Agent files to each client.

    When the Security Server completes the installation to a client, the installation status will appear in the Status field of the Selected Computers list box, and the client name appears with a green check mark.

If installation with remote install is unsuccessful, perform these tasks:

  • Verify that client-server communication exists by using ping and telnet.

  • Check if TCP/IP on the client is enabled and properly configured.

  • If you are using a proxy server for client-server communication, check of the proxy settings are configured correctly.

  • In the web browser, delete Trend Micro add-ons and the browsing history.