TUXGUARD DEVICE Deployment

There are multiple ways to deploy a previously created bundle. On this page you will find some useful hints.

In order to avoid the install wizard, use the parameters /SILENT or /VERYSILENT.

Deployment using Windows Management Instrumentation (WMI)

1. Create the Bundle you want to deploy
2. Extract the Bundle to a share, e.g. \\sharename\somecoolname\TUXGUARD_PRO_ENDPOINT\ It will contain all installation files you need.
3. Ensure yourself that Windows Firewall does not block WMI traffic
4. Use following command to deploy the TUXGUARD_PRO_ENDPOINT

WMIC /node:[ip or name] /user:[username with admin privileges] /password:[user pw] process call create "C:\[path to setup]\TUXGUARD-EPP-Setup.exe /VERYSILENT"

Deployment using PSExec

PsExec is a light-weight telnet-replacement that lets you execute processes on other systems, complete wih full interactivity for console applications, without having to manually install client Software
see

1. Create the Bundle you want to deploy
2. Extract the Bundle to a share, e.g. \\sharename\somecoolname\TUXGUARD_PRO_ENDPOINT\ It will contain all installation files you need.
3. Download PSExec
4. Way A: Use following command to deploy the TUXGUARD_PRO_ENDPOINT

psexec \\[PCNAME],[PCNAME2] -u [domain\adminuser] -p [adminpassword] \\sharename\somecoolname\TUXGUARD_PRO_ENDPOINT\bundlename\TUXGUARD-EPP-Setup.exe /VERYSILENT

1. Way B: Create a txt file containing all computers you want to deploy e.g C:\computers.txt and use @ parameter to refer to the txt files

psexec -u [domain\adminuser] -p [adminpassword] @C:\computers.txt \\sharename\somecoolname\TUXGUARD_DEVICE_SECURITY\bundlename\TUXGUARD-EPP-Setup.exe /VERYSILENT

Deployment using startup script via GPO

The setup file is currently a setup.exe (not MSI), therefore you cannot distribute it via “Computer Configuration\Policies\Software Settings\Software Installation” policy.

Hence, using a startup script under “Computer Configuration\Policies\Windows Settings\Scripts\Startup” is another choice to deploy your software. However, the software should only install once and not each startup. The popular way to do it is to check whether a specific installation file is available, which is then read on startup and if the file exists, then don’t install. We are checking for AVRealtime.exe in the example script.

1. Create the Bundle you want to deploy
2. Extract the Bundle to a share, e.g. \sharename\somecoolname\TUXGUARD_DEICE_SECURITY\ It will contain all installation files you need.
3. Edit following startup script and add it to the startup properties using the group policy management console.
4. TUXGUARD DEVICE SECURITY will be installed at the next startup phase
5. About 10 minutes after the installation the TUXGUARD DEVICE SECURITY instance will be registered with DCM

Your batch script should look like this, please edit the location of the share and insert the correct executable name:

@echo off
REM TUXGUARD DEPLOY SCRIPT
REM check software existance advanced
IF EXIST "%PROGRAMFILES(X86)%\TUXGUARD\TUXGUARD_DEVICE_SECURITY\AVRealtime.exe" GOTO end

REM check software existance basic
IF EXIST "%PROGRAMFILES(X86)%\TUXGUARD\TUXGUARD_DEVICE_SECURITY\AVRealtime.exe" GOTO end

REM run installer in VERYSILENT Mode, make sure all file are readable.
REM if you want to show installation progress, you can use /SILENT instead of /VERYSILENT

REM EDIT THIS LINE!
\\sharename\somecoolname\TUXGUARD_DEVICE_SECURITY\bundlename\TUXGUARD-EPP-Setup.exe /VERYSILENT


:end