Install CyberCNS Agent MSI using GPO

Owned by Vrushali Parkar
Last updated: Oct 27, 2023 by Vrushali
4 min read

Step 1: Create a Shared Folder

  1. Create a folder named "ccns" where you can store the CyberCNS Agent MSI installer and related files.

  2. Copy the "cybercnsagent.msi" ( Download from Probes/Agents for the company) and "install_ccns.bat" (script provided at the bottom of this document) files into the "ccns" folder.


  3. Share the "ccns" folder with the network by following these steps:

• Right-click on the "ccns" folder and select "Properties."

  • Go to the "Sharing" tab and click on "Advanced Sharing."

 

  • Check the box for "Share this folder" and set the share name as "ccns2" (for example).

  • Click "Permissions" and add "Everyone" with Read/Write permissions.

 

 

 

 

  • Save the settings and note down the shared path (e.g., \CCNS-DC7\ccns2)

 

Step 2: Configure Group Policy

  • Open the Group Policy Management Console (GPMC).

  • Select the domain for which you want to create a new Group Policy Object (GPO).

  • Right-click on the domain and choose "Create a GPO in this domain, and Link it here..."

  • Name the new GPO, for example, "Deploy CCNS Agent Through GPO.

  • Right-click on the newly created GPO and select "Edit."

  • In the Group Policy Management Editor, navigate to "Computer Configuration" > "Policies" > "Windows Settings" > "Scripts (Startup/Shutdown)."

  • Double-click on "Startup" in the right pane.

 

  • Click on "Add" to add a new startup script.

  • Select the "install_ccns.bat" script from the shared folder (e.g., \CCNS-DC7\ccns2\install_ccns.bat).

Click "OK" to add the script.

  • Close the Group Policy Management Editor.

Step 3: Apply the GPO

  • In the Group Policy Management Console, right-click on the Organisational Unit (OU) where you want to deploy the CyberCNS Agent.

  • Select "Link an Existing GPO" and choose the "Deploy CCNS Agent Through GPO" GPO.

Deployment Process

  • Group Policy will now deploy the CyberCNS Agent MSI and execute the "install_ccns.bat" script during computer startup.

  • Below script to be saved as install_ccns.bat, wherein the highlighted parameters to be copied from the actual installation command for that company.

  • Get installation command from Probes/Agents section of the company. eg. as shown below.

@echo off
setlocal

set "msiPath=\\ccns-dc7\ccns\cybercnsagent.msi"
set "parameters=-c 9394e580-c156-4d5d-a835-2c9977c7d0e8 -a 07ac9322-4da8-4ea1-aff8-6015cd0b4dc1 -s dddb9d50-6d67-4c5f-8e14-72e08290f546 -b portalapsoutheast2.mycybercns.com -e chandu -i LightWeight"

rem Check if the service is already running
sc query CyberCNSAgentV2 | find "RUNNING" > nul
if not errorlevel 1 (
echo CyberCNSAgentV2 service is already running. Exiting.
exit /b
)

rem Check if the installation path exists
if exist "C:\Program Files (x86)\CyberCNSAgentV2" (
echo Installation path already exists. Exiting.
exit /b
)

msiexec /i "%msiPath%" /passive /qn WRAPPED_ARGUMENTS="%parameters%"

endlocal

  • The script will install the agent silently with the specified parameters.

Notes:

  • Make sure the shared folder path (e.g., \CCNS-DC7\ccns2) is accessible from the computers in the OU.

  • The script will install the CyberCNS Agent using the provided MSI file and parameters.

  • Security filtering can be applied to target specific computers or groups for deployment.

By following these steps, you will be able to deploy the CyberCNS Agent MSI through Group Policy to the selected computers in your network.