Deploying Hideez Client MSI via GPO (Group Policy Object)

To deploy the Hideez Client via GPO using an MSI package, follow these steps:

1. Create a Distribution Point

Create a shared network directory to store the MSI package.

• Set the appropriate access permissions for workstations.

• Copy the Hideez Client MSI file:

  • Download the appropriate MSI file (x86 or x64) and place it in the shared network directory.

2. Create a Group Policy Object (GPO)

• Press Win+R, type gpmc.msc, and press Enter.

• Expand Forest -> Domain and right-click your domain.

• Select Create a GPO in this domain, and Link it here....

• Name your policy (e.g., Install Hideez Client).

3. Assign the MSI Package

• Right-click the newly created policy and select Edit.

• In the policy, navigate to Computer Configuration -> Policies -> Software Settings.

• Right-click Software Installation and select New -> Package.

• Select the MSI file from the shared directory.

• In the dialog box, select Assigned and click OK.

4. Configure the Registry to Set the Hideez Server

• Right-click the policy and select Edit.

• Expand Computer Configuration -> Preferences -> Windows Settings -> Registry.

• Select New -> Registry Item and enter the following settings for the Hideez Client configuration:

  • Action: Update

  • Hive: HKEY_LOCAL_MACHINE

  • Key Path: SOFTWARE\Hideez\Client

  • Value Name: client_server_address

  • Value Type: REG_SZ

  • Value Data: Your Hideez server address (e.g., http://192.168.1.1 or https://hes.example.com)

Additional Registry Settings for Bluetooth, USB Dongle, and Mobile-Only Use:

• Value Name: mode (REG_DWORD, Value Data: 1 for enterprise version)

• Value Name: no_ble (REG_DWORD, Value Data: 1 for mobile app use only, without hardware keys)

• Value Name: use_hdongle (REG_DWORD, Value Data: 1 to use USB Dongle, 0 to disable it)

• Value Name: use_win10 (REG_DWORD, Value Data: 1 to use Windows Bluetooth, 0 to disable it)

Example of using Hideez Client with an external USB Dongle enabled.

5. Restart and Install

• Restart the workstations.

• Log in with a domain account that has administrative rights, and the Hideez Client application will be automatically installed.