User manual SOPHOS NAC 3.0 DEPLOYING THE AGENT USING SMS

[. . . ] Document version 3. 0 Published July 2007 2 Deploying the Agent Using SMS 2003 Table of Contents Using SMS 2003 for a Silent Sophos NAC Agent Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 General Approach. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Packaging the Registry Setting with the Agent Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Creating an SMS Package to Deliver the EXE File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Click the Media tab, and then select the Single File Installation option button. 6. Click the Application tab, and then type a Software Title and Default Directory. Note: Do not select the Place default directory under Program Files check box. 5 Deploying the Agent Using SMS 2003 7. Click the Dialogs tab, clear the Destination Directory, and select the Select Icon Group Name check box. 8. Click the Files tab, expand the drive under My Computer to display the directory where you placed the Sophos NAC Agent installation file. 12. Under Summary Information, select Registry Keys, and then click Properties. Click the Registry tab, expand the registry tree under My Computer to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, and then click Add Keys. Select the <default> key value, and then click Details to display the Registry Key Settings window. 18. Type a Value Name and a Data Value, and then select a String from the Data Type list box. Note: The Data Value must be `msiexec \i "C:\<install directory>\<AgentInstall. msi>" \qn'. This registry entry is the command that is run the next time the endpoint restarts after the installation. 20. Click OK two times to close the windows and return to the main window. A Save As window displays. 7 Deploying the Agent Using SMS 2003 22. The following window displays the progress of the compilation of the self-installing EXE. Sophos NAC Agent and registry setting have now been packaged as an installable EXE file. Creating an SMS Package to Deliver the EXE File Once you have created an EXE for the registry entry and the Agent, you must create a SMS package to install the software on endpoints. Open the SMS Administrator MMC snap-in, and select Site Database > Collections. Right-click the collection to which the package will be delivered, click All Tasks > Distribute Software to access the Distribute Software to Collection Wizard. 8 Deploying the Agent Using SMS 2003 3. Type a Name, and then click Next. 9 Deploying the Agent Using SMS 2003 6. Select the Create a compressed version of the source option button, and then click Next. 7. [. . . ] On the Assign Program window, keep the default settings, and then click Next. 19. When this wizard completes, the package is advertised on SMS to be installed on all endpoints found in the collection. When the package is installed on an endpoint, it places a copy of the Agent installation file in the directory that is specified in the installation program. [. . . ]