Deploying Hideez Client MSI via GPO (Group Policy Object)
Hideez Client App – Deploying MSI via GPO
The Hideez Client can be deployed via GPO (Group Policy Object) using an MSI package to automate software installation and management across corporate network computers. This solution offers several key benefits for organizations using Hideez Enterprise Server (HES):
Centralized Deployment
Automatic Updates
Simplified Configuration
Enhanced Security
Ease of Management
To deploy the Hideez Client via GPO using an MSI package, follow these steps:
1. Create a Distribution Point
Create a shared network directory to store the MSI package.
Set the appropriate access permissions for workstations.
Copy the Hideez Client MSI file:
Download the appropriate MSI file (x86 or x64) and place it in the shared network directory.
2. Create a Group Policy Object (GPO)
Press Win+R, type
gpmc.msc, and press Enter.Expand Forest -> Domain and right-click your domain.
Select Create a GPO in this domain, and Link it here....
Name your policy (e.g., Install Hideez Client).
3. Assign the MSI Package
Right-click the newly created policy and select Edit.
In the policy, navigate to Computer Configuration -> Policies -> Software Settings.
Right-click Software Installation and select New -> Package.
Select the MSI file from the shared directory.
In the dialog box, select Assigned and click OK.
4. Configure the Registry to Set the Hideez Server
Right-click the policy and select Edit.
Expand Computer Configuration -> Preferences -> Windows Settings -> Registry.
Select New -> Registry Item and enter the following settings for the Hideez Client configuration:
Action: Update
Hive: HKEY_LOCAL_MACHINE
Key Path: SOFTWARE\Hideez\Client
Value Name: client_server_address
Value Type: REG_SZ
Value Data: Your Hideez server address (e.g., http://192.168.1.1 or https://hes.example.com)
Additional Registry Settings for Bluetooth, USB Dongle, and Mobile-Only Use:
Value Name:
mode(REG_DWORD, Value Data: 1 for enterprise version)Value Name:
no_ble(REG_DWORD, Value Data: 1 for mobile app use only, without hardware keys)Value Name:
use_hdongle(REG_DWORD, Value Data: 1 to use USB Dongle, 0 to disable it)Value Name:
use_win10(REG_DWORD, Value Data: 1 to use Windows Bluetooth, 0 to disable it)
Example of using Hideez Client with an external USB Dongle enabled.
5. Restart and Install
Restart the workstations.
Log in with a domain account that has administrative rights, and the Hideez Client application will be automatically installed.
To update the program, remove the old rule in GPO and add a new one with the updated MSI file.
For detailed information, please refer to the full this instruction.
Last updated