TREND AGENTS AND ENDPOINT LOCATION
Please read through the article regarding how to download the Trend agents from the agent repository and the importance of using the correct agent for the right network.
For the method described below, you will want to use the MSI installers that are available in the agent repository.
CREATING THE GPOS
The following steps will walk through creating a GPO to distribute the OSCE agent.
-
Right-click on the "Group Policy Objects" branch in the left-hand pane and select "Create a new GPO"
-
Create a name for your GPO (please be sure to prefix the name with your unit's identifying abbreviation)
-
Leave "Source Starter GPO" at (none) and click OK
-
Locate your new GPO under "Group Policy Objects", right-click, and open it for Edit
-
Drill down to Computer Configuration, Policies, Software Settings, Software Installation.
-
Right Click, and select New Package
-
Navigate to your install point. Remember, this must be open to read to all of your computers so they can install the package. Give "Domain Computers" read access to this location. DO NOT USE THE UFEM AGENT REPOSITORY AS YOUR INSTALL POINT.
-
Select the MSI file. Click "Open"
-
Select "Assigned" and click OK
-
Close the "Group Policy Management Editor" window to save your work
-
Under the "Domains" branch, drill down till you find the OU that you want to deploy to
-
Right-click the OU and select "Link an existing GPO"
-
Select your new GPO from the list and click OK
-
Click on your new GPO to bring up its properties in the right-hand pane
-
On the "Scope" tab, under the "WMI Filtering" section, there is a drop down box with a listing of pre-made WMI filters. There are 2 filters that we are interested in:
-
UFIT-UFEM: Machine is NOT on a Closed or Protected HSC network
-
UFIT-UFEM: Machine IS on a Closed or Protected HSC network
-
Select the filter that applies to your endpoints
USING THE CORRECT WMI FILTER
-
If you choose the "UFIT-UFEM: Machine is NOT on a Closed or Protected HSC network" filter, your GPO should be using the MSI that is found in the "Campus" agent repo folder
-
If you choose the "UFIT-UFEM: Machine IS on a Closed or Protected HSC network" filter, your GPO should be using the MSI that is found in the "HSC" agent repo folder
WMI FILTERS AND HSC NETWORKS
The WMI Filters have been populated with all of the closed and restricted HSC networks that have Trend agents running on them. Please submit a Cherwell ticket if you find a network that isn't included but should be.