# Deploying Hideez Client MSI via GPO (Group Policy Object)

{% hint style="info" %}
The Hideez Client can be deployed via GPO (Group Policy Object) using an MSI package to automate software installation and management across corporate network computers. This solution offers several key benefits for organizations using Hideez Enterprise Server (HES):

* **Centralized Deployment**
* **Automatic Updates**
* **Simplified Configuration**
* **Enhanced Security**
* **Ease of Management**
  {% endhint %}

## To deploy the Hideez Client via GPO using an MSI package, follow these steps:

### **1. Create a Distribution Point**

Create a shared network directory to store the MSI package.

* Set the appropriate access permissions for workstations.
* Copy the Hideez Client MSI file:
  * Download the appropriate MSI file (x86 or x64) and place it in the shared network directory.

{% hint style="info" %}
You can find .msi installation files here - [x86](https://update.hideez.com/update/hideezclient/x86/clientsetup.msi), [x64](https://update.hideez.com/update/hideezclient/x64/clientsetup.msi).
{% endhint %}

#### **2. Create a Group Policy Object (GPO)**

* Press **Win+R**, type `gpmc.msc`, and press Enter.
* Expand **Forest** -> **Domain** and right-click your domain.
* Select **Create a GPO in this domain, and Link it here...**.
* Name your policy (e.g., *Install Hideez Client*).

<div><figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FzC7ZakOQ5uLHm6km5ZGD%2Fimage.png?alt=media&#x26;token=012c4661-3d5f-4a2f-97b0-35e34ee6631d" alt=""><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FQAtP1sY7y65B03j0pELM%2Fimage%20(1).png?alt=media&#x26;token=5f362dc3-7bd2-450f-8e39-963250570f1a" alt=""><figcaption></figcaption></figure></div>

#### **3. Assign the MSI Package**

* Right-click the newly created policy and select **Edit**.
* In the policy, navigate to **Computer Configuration** -> **Policies** -> **Software Settings**.
* Right-click **Software Installation** and select **New** -> **Package**.
* Select the MSI file from the shared directory.
* In the dialog box, select **Assigned** and click OK.

<div><figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FhU7tEr1Rs7UBSdYMuTdd%2Fimage%20(2).png?alt=media&#x26;token=36cc79be-ff55-403b-bb90-d56cd293dc9d" alt=""><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FmenqxTRMK4MYWZBCcxMm%2Fimage%20(3).png?alt=media&#x26;token=9c01aebd-126f-473a-a8b9-71c5295f8592" alt=""><figcaption></figcaption></figure></div>

#### **4. Configure the Registry to Set the Hideez Server**

* Right-click the policy and select **Edit**.
* Expand **Computer Configuration** -> **Preferences** -> **Windows Settings** -> **Registry**.
* Select **New** -> **Registry Item** and enter the following settings for the Hideez Client configuration:

  * **Action**: Update
  * **Hive**: HKEY\_LOCAL\_MACHINE
  * **Key Path**: SOFTWARE\Hideez\Client
  * **Value Name**: client\_server\_address
  * **Value Type**: REG\_SZ
  * **Value Data**: Your Hideez server address (e.g., <http://192.168.1.1> or <https://hes.example.com>)

<div><figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FmZDWAabxRckxOCI6NLHl%2Fimage%20(4).png?alt=media&#x26;token=0434fd0d-d063-4c3c-9f9c-04f15358d44b" alt=""><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FhjqAk7ZOfq8k0rlluLzH%2Fimage%20(5).png?alt=media&#x26;token=edb367a5-4eaa-4b1b-a986-70fbbb4367c6" alt=""><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FumsHbuM8Hdwz48l3nrbi%2Fimage%20(6).png?alt=media&#x26;token=b422f917-2c67-4880-8433-8a70cffaf5bb" alt=""><figcaption></figcaption></figure></div>

**Additional Registry Settings for Bluetooth, USB Dongle, and Mobile-Only Use:**

* **Value Name**: `mode` (REG\_DWORD, Value Data: 1 for enterprise version)
* **Value Name**: `no_ble` (REG\_DWORD, Value Data: 1 for mobile app use only, without hardware keys)
* **Value Name**: `use_hdongle` (REG\_DWORD, Value Data: 1 to use USB Dongle, 0 to disable it)
* **Value Name**: `use_win10` (REG\_DWORD, Value Data: 1 to use Windows Bluetooth, 0 to disable it)

**Example of using Hideez Client with an external USB Dongle enabled.**

<figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FXjMJaBewWWkewsYUKd4E%2Fimage%20(7).png?alt=media&#x26;token=d6361b4a-1058-4ce1-9d5a-41f42852af61" alt=""><figcaption></figcaption></figure>

#### **5. Restart and Install**

* Restart the workstations.
* Log in with a domain account that has administrative rights, and the Hideez Client application will be automatically installed.

{% hint style="success" %}
**To update the program, remove the old rule in GPO and add a new one with the updated MSI file.**
{% endhint %}

{% hint style="info" %}
For detailed information, please refer to the full this [instruction](https://support.microsoft.com/en-us/help/816102/how-to-use-group-policy-to-remotely-install-software-in-windows-server).
{% endhint %}