With the help of the GFI LanGuard server custom remediation jobs, organizations can remotely deploy third-party software and applications to the servers and workstations network-wide. This article describes all the software (.msi packages for the msiexec, third party agents, batch files, etc) that can be installed this way, gives directions on how to prepare the files and parameters, and provides the steps to specify and run the deployment.
In order to install a program, custom software, or run a custom script with the GFI LanGuard, prepare all the files required and then specify the file(s) to be deployed and the required parameters manually through the LanGuard console.
Prepare Deployment Files
Gather the files to deploy, research the parameters for a silent install without user interaction, prepare required scripts and batch files. Software that can be remotely deployed includes:
- MSI packages with the help of the msiexec Windows installer
- Security applications such as anti-virus/anti-spyware solutions and software firewalls
- Third-party software updates and patches such as anti-virus/anti-spyware signature file updates
- Custom code such as scripts and batch files
- Desktop applications such as Microsoft Office 2007 and more.
GFI is unable to assist in building and testing of custom deployment scripts or batch files as they are nonstandard deployments with variables specific to client environments.
It is vitally important to specify parameters for a full silent deployment without any user interaction, otherwise, the deployment will fail. Since these parameters can be different for every application, they have to be obtained from the respective vendor.
It is possible to specify auxiliary files for deployment. This option allows the specification of files that are required for deployment but are not actual executables, like XML answer files or additional CAB archives.
For example, if you want to deploy an MSI package, it has to be specified as an auxiliary file, while the batch file with the custom msiexec string for the silent install of this MSI package should NOT be marked auxiliary.
It is important to know, that once the executable/script/batch-file is copied to the target computer (C:\Windows\Patches directory), it will be executed using Local System credentials which will have no access to network locations.
Therefore, all files called by the executable/script/batch-file must be added to the Specify the software to be deployed list and marked as an Auxiliary file when clicking the Add.. button.
The executable/script/batch-file itself should not be marked as an Auxiliary file and should not reference network locations.
Configure the Deployment
When adding files, LanGuard will by default filter the file selection window for executable (*.exe) files. However, LanGuard is able to also deploy *.bat, *.vbs, *.exe, and *.msi files. To select these files simply set the extension filter to ‘All files (*.*)’.
To specify which software to deploy:
- Click the Remediate tab > Remediation Center.
- From the computer tree, select the computers where the new software will be deployed and click Deploy Custom Software.
- Use the options described in Table below to add the applications and Auxiliary files to deploy:
Option Description Add Click this button to launch the Add custom software dialog. This dialog enables you to add an application to the list and if required configure parameters. Edit Select an application and click this button to launch the Add custom software dialog. This dialog enables you to modify the existing installation parameters. Remove Select an application from the list and click this button to remove the application. Import Click this button to import the application parameters from an XML file. Export Click this button to export the application parameters to the XML file.
- After adding all the necessary files and parameters, click Deploy, and configure the options described below:
Option Description Deploy immediately Deploy the selected applications immediately. Deploy on Deploy the selected applications on a specific date and time. Configure when to deploy the applications. Credentials Select the authentication method to use or specify a username and password. Select Use per computer credentials when available, to use the credentials specified in the computer properties. For more information refer to Configuring Agent Properties. Before deployment options Configure the actions to perform before deploying the selected applications. For more information refer to Configuring Auto-Remediation Options. After deployment options Configure the actions to perform after deploying the selected applications. For more information refer to Configuring Auto-Remediation Options. Advanced options Configure other options related to reboot/shut down and delete copied files from remote computers. For more information refer to Configuring Auto-Remediation Options.
- Click OK to run or schedule the configured Deployment.