User manual SOPHOS NAC 3.0 DEPLOYING THE AGENT USING SMS

[. . . ] The SMS package must update a registry entry that forces the Agent installation to run when an endpoint restarts. SMS pushes the package to endpoints and the package is installed immediately. This installation is not the Agent, only the package that includes the registry update and the Agent installation file. The next time the endpoint starts, the Agent installs. [. . . ] 6 Deploying the Agent Using SMS 2003 13. Click OK to close the Application Files window. From the Installation Attributes list, select User Configuration. Under Summary Information, select Registry Keys, and then click Properties. Click the Registry tab, expand the registry tree under My Computer to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, and then click Add Keys. Select the <default> key value, and then click Details to display the Registry Key Settings window. 18. From the Operation list box, select Create/Update key and value. Type a Value Name and a Data Value, and then select a String from the Data Type list box. Note: The Data Value must be `msiexec \i "C:\<install directory>\<AgentInstall. msi>" \qn'. This registry entry is the command that is run the next time the endpoint restarts after the installation. 20. Click OK two times to close the windows and return to the main window. A Save As window displays. 7 Deploying the Agent Using SMS 2003 22. Save the SMS Installer project as an IPF file. The following window displays the progress of the compilation of the self-installing EXE. Sophos NAC Agent and registry setting have now been packaged as an installable EXE file. Creating an SMS Package to Deliver the EXE File Once you have created an EXE for the registry entry and the Agent, you must create a SMS package to install the software on endpoints. Open the SMS Administrator MMC snap-in, and select Site Database > Collections. Right-click the collection to which the package will be delivered, click All Tasks > Distribute Software to access the Distribute Software to Collection Wizard. 8 Deploying the Agent Using SMS 2003 3. Select the Create a new package and program option button. Type a Name, and then click Next. 9 Deploying the Agent Using SMS 2003 6. Select the Create a compressed version of the source option button, and then click Next. 7. Click Browse, and then select the source directory in the Browse for Folder window. 10 Deploying the Agent Using SMS 2003 8. [. . . ] Note: If you need to only send the advertisement to a limited number of systems within a given collection, then select the Advertise the program to members of subcollections well option button, and then click Next. 17. On the Advertisement Schedule window, as needed, change the date and time when the program will be advertised, and then click Next. 15 Deploying the Agent Using SMS 2003 18. On the Assign Program window, keep the default settings, and then click Next. 19. When this wizard completes, the package is advertised on SMS to be installed on all endpoints found in the collection. [. . . ]