Mobile Client Windows Deployment Kit > Deployment

The modified 8e6client.msi file can be distributed using Windows Group Policy by creating a Group Policy Object (GPO) which assigns this software to the required computers on the network.

NOTE: The procedure suggested below presumes that you're using the free add-on Group Policy Management Console (GPMC) provided by Microsoft.

1. Make the distribution .msi file available to the target workstations on a network share (e.g. \\{servername}\8e6MobileClient\8e6client.msi) .
2. Create a new Group Policy Object:
   • In the GPMC, select Group Policy Management > Forest > Domains > {domain name} > Group Policy Objects.
   • Right-click and choose "New", then create a name for the policy (suggest "Trustwave Mobile Client Deployment"). Click OK.
   • In the Group Policy Object Editor, open the {policy name} > Computer Configuration > Software Settings > Software installation node.
   • Click on the right panel and choose New > Package. Navigate to the distribution .MSI file you shared in step 1, and click "Open". When prompted, select "Assigned" for the deployment method. Click OK.
   • Right-click on the new package and choose Properties > Deployment, and then check the "Uninstall this application when it falls out of the scope of management" box. Click OK.
   • Close the Group Policy Object Editor.
3. Link the new policy:
   • In the GPMC, select the domain or organizational unit for which the policy should be applied.
   • Right-click, choose "Link an existing GPO", and then select the new policy you created in step 2. Click OK.
   • Right-click the new policy in the tree, and then deselect the "Link Enabled" menu checkmark. (The link will be re-enabled later in this procedure.)
4. Create a filter for the policy:
   A GPO filter limits the scope of the policy so that the Mobile Client is only installed on the appropriate computers. For example, you may want to install it on all workstations but not servers. There are two types of filters: Security filters and WMI filters.

   To create a Security filter:

• Select the new policy link. Note the "Security Filtering" section in the Scope panel to the right.
• Click "Authenticated Users" and then "Remove".
• Click "Add...", and then click "Object Types". Check the "Computers" type and uncheck the "Users" type. Click OK.
• Enter the names of all the computers to receive the Mobile Client installation, separated by semicolons. (Alternatively, you can select a User or Computer group created previously—details of group creation are beyond the scope of this procedure.)
• Click OK.

  To create a WMI filter:

  WMI filters are capable of applying very sophisticated selection criteria to set the scope of a policy. See Microsoft Knowledgebase article #555253 for details on creating WMI filters: http://support.microsoft.com/kb/555253

5. Enable the policy link:
   Return to the new policy link in the GPMC for the target domain or Organizational Unit, right-click, and then choose "Link Enabled".
6. Test the deployment:
   • Select one of the workstations within the scope of the policy and refresh its policies by running gpupdate.exe.
     NOTE: By default, Windows periodically refreshes the group policy automatically. Using gpupdate allows you to force an immediate refresh for test purposes—this is not something all users on the network should be required to do.
   • Reboot the workstation and log in.
     NOTE: in some cases involving Windows XP workstations, it may be necessary to reboot twice for Group Policy processing to occur.
   • Verify the Mobile Client is blocking access to unauthorized Web sites, and is allowing access to other sites.

Related Topics for Windows Network Administrators:

• Mobile Client Configuration
• Mobile Client Removal Using Windows Group Policy

Back | Top