KBI 311320 How To Deploy Argent for Security USB Monitoring Agent Through Active Directory Group Policy

Version

Argent for Security all versions

Date

Thursday, 3 December 2015

Summary

Argent for Security is using an Agent for USB monitoring on remote machines

In order for the ease of deployment Argent provides this agent in a MSI package which can be easily deployed by setting a Group Policy in the Active Directory

This document explains the step by step instructions to deploy Argent for Security USB Monitoring Agent

To download ARGENT_FOR_SECURITY_USB_AGENT_MSI_MAKER.ZIP tool:

Technical Background

Deployment Of Argent for Security USB Monitoring Agent On A Windows 2008 Server

Step 1 – Single Click To Create Argent for Security USB Agent MSI Package

The USB agent must be provided with Argent for Security Main Engine name for its functioning

When the Agent is deployed as an MSI package through Active Directory Group Policy, an unattended installation – without the user key in the Argent Main Engine name – is preferred

To accomplish this, the MSI package is created on the fly with a single click command file

Following are the steps to make the MSI Package on the fly

Please copy ‘ARGENT_FOR_SECURITY_USB_AGENT_MSI_MAKER.ZIP’ file to the folder “C:\Temp”
Extract the zip file using ‘Extract Here’
This will create a folder “C:\Temp\ARGENT_FOR_SECURITY_USB_AGENT_MSI_MAKER” as shown below

Click For Full Size

Please edit the “ARGENT_FOR_SECURITY_USB_AGENT_MSI_MAKER.CMD”

Replace the string “###MAIN_ENGINE_NAME###” with the Argent for Security Main Engine name

Note: Please change only the text marked in red as shown above

There is one more such string in the script which is used for validation purpose

Please do not change it
Execute the script ‘ARGENT_FOR_SECURITY_USB_AGENT_MSI_MAKER.CMD’ using the option ‘Run As Administrator’ as shown below

Click For Full Size
Multiple console windows appear as shown below
When the CMDs exit, ‘ARGSOFT_USB_AGENT.msi’ will be created in the same folder as shown below

Click For Full Size

Use this MSI package for deployment

Step 2 – Create A Distribution Point

Follow the succeeding steps to create a distribution point which is a shared folder in the domain server

Log on to the server as an Administrator
Create a folder called ‘Argsoft_USB_Agent’
Share the folder
Set permissions on the share to allow access to the distribution package
Copy the MSI package to the distribution point