Deploying Hideez Client MSI via GPO (Group Policy Object)

Hideez Client App – Deploying MSI via GPO

The Hideez Client can be deployed via GPO (Group Policy Object) using an MSI package to automate software installation and management across corporate network computers. This solution offers several key benefits for organizations using Hideez Enterprise Server (HES):

• Centralized Deployment

• Automatic Updates

• Simplified Configuration

• Enhanced Security

• Ease of Management

To deploy the Hideez Client via GPO using an MSI package, follow these steps:

1. Create a Distribution Point

Create a shared network directory to store the MSI package.

• Set the appropriate access permissions for workstations.

• Copy the Hideez Client MSI file:

  • Download the appropriate MSI file (x86 or x64) and place it in the shared network directory.

You can find .msi installation files here - x86, x64.

2. Create a Group Policy Object (GPO)

• Press Win+R, type gpmc.msc, and press Enter.

• Expand Forest -> Domain and right-click your domain.

• Select Create a GPO in this domain, and Link it here....

• Name your policy (e.g., Install Hideez Client).

3. Assign the MSI Package

• Right-click the newly created policy and select Edit.

• In the policy, navigate to Computer Configuration -> Policies -> Software Settings.

• Right-click Software Installation and select New -> Package.

• Select the MSI file from the shared directory.

• In the dialog box, select Assigned and click OK.

4. Configure the Registry to Set the Hideez Server

• Right-click the policy and select Edit.

• Expand Computer Configuration -> Preferences -> Windows Settings -> Registry.

• Select New -> Registry Item and enter the following settings for the Hideez Client configuration:

  • Action: Update

  • Hive: HKEY_LOCAL_MACHINE

  • Key Path: SOFTWARE\Hideez\Client

  • Value Name: client_server_address

  • Value Type: REG_SZ

  • Value Data: Your Hideez server address (e.g., http://192.168.1.1 or https://hes.example.com)

Additional Registry Settings for Bluetooth, USB Dongle, and Mobile-Only Use:

• Value Name: mode (REG_DWORD, Value Data: 1 for enterprise version)

• Value Name: no_ble (REG_DWORD, Value Data: 1 for mobile app use only, without hardware keys)

• Value Name: use_hdongle (REG_DWORD, Value Data: 1 to use USB Dongle, 0 to disable it)

• Value Name: use_win10 (REG_DWORD, Value Data: 1 to use Windows Bluetooth, 0 to disable it)

Example of using Hideez Client with an external USB Dongle enabled.

5. Restart and Install

• Restart the workstations.

• Log in with a domain account that has administrative rights, and the Hideez Client application will be automatically installed.

To update the program, remove the old rule in GPO and add a new one with the updated MSI file.

For detailed information, please refer to the full this instruction.