Deploying an MSI via GPO

1. Create a distribution point

The first step in deploying an MSI through GPO is to create a distribution point on the publishing server. This can be done by following these steps:

• Log on to the server as an Administrator user

• Create a shared network folder (this folder will contain the MSI package)

• Set permissions on this folder in order to allow access to the distribution package

• Copy the MSI in the shared folder

2. Create a Group Policy Object

An MSI package is deployed (distributed) through GPO as a Group Policy Object. In order to create an object for your package, you can follow these steps:

• Click on the Start button and open Go to Start and open Group Policy Management (or press Win+R , then type gpmc.msc, then press Enter)

• Expand Forest (your forest) > Domains (your domain)

• Right-click on you domain and select “Create a GPO in this domain, and Link it here...”

• Enter a name for your policy (for example "Install HES application v.3.3.10") and leave Source Starter GPO

3. Assign an MSI package

• To edit a GPO, right click it in GPMC and select Edit from the menu. The Active Directory Group Policy Management Editor will open in a separate window.

• You should see Computer Configuration and User Configuration, right-click Computer Configuration in the panel and select Edit

• Expand Computer Configuration > Policies > Software Settings

• Right-click Software Installation and select New > Package

• Select your package from the previously configured network share

• In the dialog that appears select Assigned and click OK

• The selected package will appear in the Software Installation panel

• Click OK

• Close Group Policy Management Editor

4. Creating a key in the registry with HES server address

• Right click it in GPMC and select Edit from the menu. The Active Directory Group Policy Management Editor will open in a separate window.

• Expand Computer Configuration Preferences -> Windows Settings -> Registry and select New -> Registry Item

• Enter the following values ​​for the key:

  - Action: Update

  - Hive: HKEY_LOCAL_MACHINE

  - Key Path: SOFTWARE\Hideez\Client

  - Value Name: client_hes_address

  - Value Type: Reg_DWord

  - Value data:  the path to your server. For example http://192.168.1.1 or https://hideez.example.com

Now you need to restart the workstation and log in with a domain account with the rights to install programs and the Hideez application will be installed

To update, just delete the rule and create a new one with a new msi file.