[RESOLVED] Deploying the agent via GPO with Waptdeploy.exe

Questions about WAPT Server / Requests and help related to the WAPT server
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
virtux
Messages: 7
Registration: May 11, 2016 - 11:08

May 27, 2016 - 08:28

Hello,

I'm contacting you regarding the deployment of the agent on my network. I'm currently testing WAPTdeploy via GPO.
It deploys very well as a user GPO, except that the user account logging in needs installation privileges to avoid the popup requesting admin rights for the installation.
Is there a native workaround via GPO that allows installation? (I highly doubt it.)

Alternatively, if I set the Machine GPO, WAPTdeploy doesn't perform any action, but the rest of the test GPO is applied correctly (file creation and script execution tests).

What are the best practices for deploying the agent? :twisted:

For my tests, the standard user AD account and the test PC are in the same OU.

My test infrastructure is as follows (on the same IP subnet):
1 Debian server WAPT machine,
1 Win7 Pro administration machine,
4 client machines: Win7 Pro, Server 2008R2, Windows 8.1, and Windows 10.

Thank you in advance for your help; I will be responsive to answer any questions you may have. :D
Last edited by virtux on May 31, 2016 - 11:54, edited 1 time.
High
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :
Contact Sfonteneau

May 27, 2016 - 11:16

virtux wrote:Hello,

I'm contacting you regarding the deployment of the agent on my network. I'm currently testing WAPTdeploy via GPO.
It deploys very well as a user GPO, except that the user account logging in needs installation privileges to avoid the popup requesting admin rights for the installation.
Is there a native workaround via GPO that allows installation? (I highly doubt it)
Run waptdeploy using the computer's GPO!
virtux wrote: Otherwise, if I place the GPO Machine waptdeploy, it does not perform any action, but the rest of the test GPO is correctly applied (file creation test and execution of other scripts).
Perhaps the network is unavailable when the computer is started!
I had that problem for a while.

Try this: viewtopic.php?f=13&t=438&hilit=waptdepl ... t=20#p1097
virtux wrote: What are the best practices for deploying the agent? :twisted:

For my tests, the standard user AD account and the test PC are in the same OU.

My test infrastructure is as follows (on the same IP subnet):
1 Debian server machine (WAPT)
1 Win7 Pro administration machine,
4 client machines: Win7 Pro, Server 2008R2, Windows 8.1, and Windows 10.

Thank you in advance for your help; I will be available to answer any questions you may have. :D
Waptdeploy remains the best method.
High
virtux
Messages: 7
Registration: May 11, 2016 - 11:08

May 27, 2016 - 11:44

Thanks for the replies.

Indeed, I agree with the machine GPO (which I prefer). I'll test the network timeout setting.

For your information, my command line for waptdeploy is as follows:

\\AD1.TEST.LOCAL\WAPT\waptdeploy.exe --hash=1234567890 --wait=15 --minversion=1.3.5.0.

The wait time is set to 15 minutes, but I doubt it's really necessary to wait that long. What do you think? :?:
High
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :
Contact Sfonteneau

May 27, 2016 - 11:57

Why not use

`waptdeploy.exe --hash=1234567890 --wait=15 --minversion=1.3.5.0`

and store `waptdeploy.exe` directly in the GPO? That's what it's for!

If Wapt isn't already installed, the `wait` command has no effect,

Simon.
High
virtux
Messages: 7
Registration: May 11, 2016 - 11:08

May 27, 2016 - 1:47 PM

sfonteneau wrote:Why not use

waptdeploy.exe --hash=1234567890 --wait=15 --minversion=1.3.5.0

and store waptdeploy.exe directly in the GPO, that's what it's for!
How do you store it in the GPO? Do you mean in \\AD1\SYSVOL\...etc???
Because if that's the case, it's normal. Because in my infrastructure I don't place any files in the SYSVOL folders; I prefer to use a read-only share (replicated in real time on my ADs) with access only for authenticated users, and this also allows me to centralize the files used in order to apply changes more quickly.
sfonteneau wrote:If wapt isn't already installed, the wait has no effect,

Simon
The `wait` statement is supposed to define when the installation starts, right? I'm having trouble understanding its role. Can you explain it to me more? Thanks.

sfonteneau wrote: Otherwise, if I place the GPO Machine waptdeploy, it does not perform any action, but the rest of the test GPO is correctly applied (file creation test and execution of other scripts).
Perhaps the network is unavailable when the computer is started!
I had that problem for a while.

Try this: viewtopic.php?f=13&t=438&hilit=waptdepl ... t=20#p1097


Waptdeploy remains the best method

I've confirmed that it works, so I can finally tackle the software deployment part.
High
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :
Contact Sfonteneau

May 27, 2016 - 2:36 PM

--wait=

https://dev.tranquil.it/wiki/WAPT_-_D%C ... PT_par_GPO
High
Locked

Return to "WAPT Server"


  • To go further with WAPT