How did you deploy your agent?

[knpc]

Hi everyone,

I'd like to know the methods each of you used to deploy the WAPT agent and the steps involved.

Thanks

Knpc

[knpc]

Is there anyone who can provide instructions on the procedure to follow?

[sfonteneau]

Hello,

you can use waptdeploy.exe.

Waptdeploy is a small executable that

tests the installed version of wapt*,
downloads the installer waptagent.exe via HTTP,
launches the installer silently with the parameters /VERYSILENT /MERGETASKS=""useWaptServer"" (the options selected by default when creating waptagent will be used), and
updates the server with the machine's status (wapt version, package status).

It must be run as an administrator, hence the use of a GPO.

If no GPO is available, you can also use a logo script.

Explanation here:
https://dev.tranquil.it/wiki/WAPT_-_D%C ... PT_par_GPO

[knpc]

Hi,

I already tried following the link you gave me, but without success; my GPO won't launch.
Are there any other settings?

Did you deploy it on your server? I have a standard Windows Server 2008 R2.

If so, could you explain how you did it?

Thanks for your help.

[sfonteneau]

Hello knpc

, First, have you tried launching it manually to check if it works?

Be careful to launch it as administrator to verify.

Simon

[Floflobel]

For a script to run correctly if it's in the domain's sysvol, you need to tell it to install the script as soon as it has internet access.
Computer Group Policy: Policies -> Administrative Templates -> Run startup scripts asynchronously

[knpc]

Thank you for your replies.

I tried using a script, but it didn't work.

If I want to do it using a GPO, how do I create it?

Thank you.

[sfonteneau]

For a script to run correctly if it's in the domain's sysvol, you need to tell it to install the script as soon as it has internet access.
Computer GPO: Policies -> Administrative Templates -> Run startup scripts asynchronously

Running startup scripts asynchronously allows the scripts to be executed at startup at the same time and not one after the other.

It can indeed resolve problems if one of your previous scripts got stuck. In that case, Waptdeploy will never run and therefore will never install Wapt.

The GPO that most closely resembles what you want would therefore be: "Always wait for network on startup and connection"

Thank you for your replies.

I tried using a script, but it doesn't work.

If I want to do it using a pure GPO, how do I create it?

Thank you.

Have you tried running it manually to check if it's a DNS issue or a bad hash?

Simon

[knpc]

Hi,

Manually on a workstation, this does not work (see photo)

Order under back

waptdeploy.PNG (91.59 KB) Viewed 10452 times

I tried without specifying the version the first time, so it's using my waptdeploy.version file, the contents of which are below:

1.2.3
http://wapt.mont-tremblant.local/wapt/waptsetup.exe


The second test involves entering the version number, but nothing works.


I also see a download attempt on 127.0.0.1:8088 on this remote machine?

Here is the version my console gives me below:

version.JPG (29.74 KB) Viewed 10452 times

Thank you for your help

Knpc

[sfonteneau]

Good morning

Initially, I recommend that you deploy version 1.3.5 (the latest version)

http://wapt.tranquil.it/wapt/releases/wapt-1.3.5/

With WAPT 1.3.5, it is necessary to include a checksum in the script parameters. This ensures that waptdeploy will not launch a tampered/corrupted installer.

Therefore, you need to include this type of argument with your waptdeploy:

Code: Select all

waptdeploy.exe --hash=0e592e9113ebe2e040ad945d7b887fc69843addb5950bf0dade20458be529a1d --wait=15 --minversion=1.3.5

On a Wapt Linux server, you can retrieve this hash with the command:
sha256sum /var/www/wapt/waptagent.exe

On a Windows WAPT server, to recover the data, I recommend installing the latest version of 7-Zip (15.14.00.0) on the Windows WAPT server. Then, right-click on the waptagent file located in c:\wapt\waptserver\repository\wapt\waptagent.exe and click on CRC SHA, then on sha-256.

Simon