Jump to:navigation, search
Wiki
































De.png
En.png
Fr.png






Installation of Securepoint Antivirus Pro via GPO Script and with Config-file
Last adaption: 03.2022
New:
notempty
This article refers to a Resellerpreview
Access: av.securepoint.de Navigation Licenses


Introduction

This article describes the automated installation of Securepoint Antivirus Pro. Only the MSI installation file can be used for the automated installation.


Requirements

  • A valid Antivirus Pro license is required for the automated Installation of Securepoint Antivirus Pro.
  • There must be no GuardX Service (from a previous installation) present.
    If necessary, the AV-Remover must be executed beforehand. (Available in the Download area of the reseller portal)


Preparations

Preparations client

Download MSI installation file

The Antivirus Pro portal provides the download of the installation file. During the download, the MSI installation file including the portal config is downloaded. The portal config does not need to be used for the installation.
 AV portal licenses or  groupsactions downloadMSI

  1. Login to the Reseller Portal
  2. Das AV-Portal öffnen
  3. Menü Lizenzen oder Gruppen öffnen
  4. Download des MSI-Installationsdatei für die Lizenz oder Gruppe (Gruppe wird empfohlen)


Preparation for installation with Portal Config

The portal configuration is always included in the ZIP archive when downloading the MSI installation file.


Preparation for installation with client configuration

Av conf.png

Creating a custom configuration file:

  1. Muster-Installation: Installation von Securepoint Antivirus Pro durchführen
  2. Make the desired settings on the client
  3. Save the configuration file
notempty
The configuration file is located in the installation directory in the subfolder "conf". Only the guardx.conf is needed.


Windows Server preparations

Release directory

For the automated installation a release directory is needed.
For this purpose, a new share or a folder is created in an existing NETLOGON share:

  1. Open Server Manager
  2. File/storage services
  3. Shared Folder
  4. Right click "New share" → Run through the wizard here
notempty
! Here the authorizations must be considered compellingly so that the files are accessible later over the network path.


New organizational unit

  1. Open Server Manager
  2. Open Group Policy Management under Tools
  3. Right click on the domain, then select "Create new organizational unit".


Computer administration

  1. Open Server Manager
  2. Under Tools →Active Directory → Open user and computer
  3. Under "Computers" select the devices on which the AV should be installed with CTRL + left clic
  4. Move and then select the new organizational unit
notempty
The installation can only be carried out depending on the computer and not on the user, as this is the only way to ensure that the required authorizations apply.


Creating and linking a Group Policy Object

  1. Right click on the organizational unit
  2. Create and link a new Group Policy object there
  3. Edit the group policy object you have just created by right-clicking on it
  4. Computer Configuration → Policies → Windows Settings → Scripts (Startup/Shutdown) → Startup → Properties: Add Add the installation script below
  • The script must be on a share to which the computers have access rights!
    1. OK Accept the data and close the dialogue.


    Installation scripts

    The following scripts will install Securepoint Antivirus Pro without the need for a Windows command prompt or wizard GUI.


    Installation script with client config

    Installation of the client with the defaults of the sample installation see above

    • Installation log is created
    • Scans, exclusions etc. as stored in the client
    • Setting of the license key (via parameter TID=)
    • Confirmation of the license conditions (via parameter ACCEPTLICENSEAGREEMENT="yes")
    • Confirmation of the privacy policy (via parameter ACCEPTPRIVACYPOLICY="yes")
    • Further settings via parameters can be found in the wiki article about Silent Installation.



    Creating the Installation Script

    Create an install.bat file with the following content:
    @echo off
    tasklist /nh /fi "imagename eq guardxservice_x64.exe" | find /i "guardxservice_x64.exe" >nul && (
    exit
    ) || (
    start /wait msiexec /l* "[Path\to\file]\setuplog_%COMPUTERNAME%.txt" /i "[Path\to\file]\SetupAV.msi" ACCEPTLICENSEAGREEMENT="yes" ACCEPTPRIVACYPOLICY="yes" TID="00000000-0000-0000-0000-000000000000" CONFIG="[Path\to\directory]\" /q
    )
    exit

    notempty
    This script is an example script that has to be adapted individually!


    Save script

    Save script as *.bat and copy it to the folder

    1. Open release directory
    2. Save script
    3. Copy MSI installation file to the folder
    4. Copy client config (guardx.conf) to the folder


    Edit group policy

    Setting up the DC

    1. Open Server Manager
    2. Open Group Policy Management under Tools
    3. Edit the group policy object you have just created by right-clicking on it
    4. Computer Configuration → Policies → Windows Settings → Scripts (Start/Shutdown) → Right-click Start → Properties
    5. Add → Browse → Select script
    notempty
    Securepoint Antivirus Pro is installed after a system startup


    Installation script with parameters

    Installation of the client takes place exclusively with manual parameters

    • Installation log is created
    • Defining the license key (via parameter TID=)
    • Confirmation of the license conditions (via parameter ACCEPTLICENSEAGREEMENT="yes")
    • Confirmation of the privacy policy (via parameter ACCEPTPRIVACYPOLICY="yes")
    • Further settings via parameters can be found in the wiki article about Silent Installation



    Creating the Installation Script

    Create an install.bat file with the following content:
    @echo off
    tasklist /nh /fi "imagename eq guardxservice_x64.exe" | find /i "guardxservice_x64.exe" >nul && (
    exit
    ) || (
    start /wait msiexec /l* "[Path\to\file]\setuplog_%COMPUTERNAME%.txt" /i "[Path\to\file]\SetupAV.msi" ACCEPTLICENSEAGREEMENT="yes" ACCEPTPRIVACYPOLICY="yes" TID="00000000-0000-0000-0000-000000000000" PROPERTY="value" /q
    )
    exit

    notempty
    This script is an example script that has to be adapted individually!


    Save script

    Save script as *.bat and copy it to the folder

    1. Open release directory
    2. Save script
    3. Copy MSI installation file to the folder


    Edit group policy

    Setting up the DC

    1. Open Server Manager
    2. Open Group Policy Management under Tools
    3. Edit the group policy object you have just created by right-clicking on it
    4. Computer Configuration → Policies → Windows Settings → Scripts (Start/Shutdown) → Right-click Start → Properties
    5. Add → Browse → Select script
    notempty
    Securepoint Antivirus Pro is installed after a system startup

    Properoties used
    Parameter Description
    /l* "[Path\to\file]\setuplog_%COMPUTERNAME%.txt" Creates an installation log with the Windows varriable of the computer name
    /i "Path\to\file\SetupAV.msi" Path to the installation file
    /q Performs the installation in "Silent" mode. notempty
    Syntax change ! Switch /quiet or /q as last parameter!
    ACCEPTLICENSEAGREEMENT="yes" Accepting the Terms of License
    ACCEPTPRIVACYPOLICY="yes" Accepting the Privacy policy
    TID="00000000-0000-0000-0000-000000000000" License
    GROUPID="11111" notempty
    3.2.50
    Assign the Client to a specific group during installation.
    The GROUPID can be taken from the address line of the AV portal when the corresponding group is called or from the setup.conf of the installation ZIP archive.
    AV Groups URL.PNG
    CONFIG="[Path\to\the filing_directory]\" The path to the storage location of the configuration file. The configuration file must be named guardx.conf.