
Install on Windows with login scripts
Using Windows login scripts to install the agent can be an efficient way to make sure all systems in
your network have an agent installed.
Before you begin
• McAfee recommends first creating segments of your System Tree that use either
network domain names or sorting filters that add the expected systems to the desired
groups. If you don’t, all systems are added to the Lost & Found group, and you must move
them manually.
• Consult your operating system documentation for writing login scripts. The details of the
login script depend on your needs. This task uses a basic example.
• Create a batch file (ePO.bat) that contains commands you want to execute on systems
when they log on to the network. The content of the batch file depends on your needs,
but its purpose is to check whether the agent has been installed in the expected location
and, if not, run FramePkg.exe to install the agent. Below is a sample batch file that does
this. This example checks the default installation folder for an agent file and, if not
present, installs the new agent.
IF EXIST “C:\Program Files\McAfee\Common Framework\FRAMEWORKSERVICE.EXE” GOTO END_BATCH
\\MyServer\Agent\UPDATE$\FRAMEPKG.EXE /INSTALL=AGENT
:END_BATCH
FramePkg.exe requires administrator rights to install properly, so we recommend the
version of FramePkg.exe with embedded credentials. The installation folders for your
distribution might be different than in this example, depending on where you have
specified to install the agent.
Task
1
Copy the agent installation package, FramePkg.exe, from your McAfee ePO server to a shared
folder on a network server, where all systems have permissions.
• Systems logging on to the network are automatically directed to this folder to run the
agent installation package and install the agent. The default location for the agent
installation packages for Windows is: C:\Program Files\McAfee\ePolicy
Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409\FramePkg.exe
• Embedded credential package always runs in silent mode and does not display any
error message when an installation fails.
2
Save the batch file you created, ePO.bat, to the NETLOGON$ folder of your primary domain
controller (PDC) server. The batch file runs from the PDC every time a system logs on to the
network.
3
Add a line to your login script that calls the batch file on your PDC server.
The line would look similar to this example: CALL \\PDC\NETLOGON$\EPO.BAT
Install using Group Policy Object
The agent supports deployment using Window's Group Policy Objects on client systems in their
network. The administrator must copy the agent Group Policy Object files and msi file to a shared path
(UNC path) accessible to each client system on which you want to install the agent.
2
Installing the agent
Install on Windows systems
36
McAfee
®
Agent 4.8.0 Product Guide
Commentaires sur ces manuels