Tranquil IT Forum

Hello,

I'm contacting you regarding the deployment of the agent on my network. I'm currently testing WAPTdeploy via GPO.
It deploys very well as a user GPO, except that the user account logging in needs installation privileges to avoid the popup requesting admin rights for the installation.
Is there a native workaround via GPO that allows installation? (I highly doubt it.)

Alternatively, if I set the Machine GPO, WAPTdeploy doesn't perform any action, but the rest of the test GPO is applied correctly (file creation and script execution tests).

What are the best practices for deploying the agent?

For my tests, the standard user AD account and the test PC are in the same OU.

My test infrastructure is as follows (on the same IP subnet):
1 Debian server WAPT machine,
1 Win7 Pro administration machine,
4 client machines: Win7 Pro, Server 2008R2, Windows 8.1, and Windows 10.

Thank you in advance for your help; I will be responsive to answer any questions you may have.

virtux wrote:Hello,

I'm contacting you regarding the deployment of the agent on my network. I'm currently testing WAPTdeploy via GPO.
It deploys very well as a user GPO, except that the user account logging in needs installation privileges to avoid the popup requesting admin rights for the installation.
Is there a native workaround via GPO that allows installation? (I highly doubt it)

Run waptdeploy using the computer's GPO!

virtux wrote: Otherwise, if I place the GPO Machine waptdeploy, it does not perform any action, but the rest of the test GPO is correctly applied (file creation test and execution of other scripts).

Perhaps the network is unavailable when the computer is started!
I had that problem for a while.

Try this: viewtopic.php?f=13&t=438&hilit=waptdepl ... t=20#p1097

virtux wrote: What are the best practices for deploying the agent?

For my tests, the standard user AD account and the test PC are in the same OU.

My test infrastructure is as follows (on the same IP subnet):
1 Debian server machine (WAPT)
1 Win7 Pro administration machine,
4 client machines: Win7 Pro, Server 2008R2, Windows 8.1, and Windows 10.

Thank you in advance for your help; I will be available to answer any questions you may have.

Waptdeploy remains the best method.

Thanks for the replies.

Indeed, I agree with the machine GPO (which I prefer). I'll test the network timeout setting.

For your information, my command line for waptdeploy is as follows:

\\AD1.TEST.LOCAL\WAPT\waptdeploy.exe --hash=1234567890 --wait=15 --minversion=1.3.5.0.

The wait time is set to 15 minutes, but I doubt it's really necessary to wait that long. What do you think?

Why not use

`waptdeploy.exe --hash=1234567890 --wait=15 --minversion=1.3.5.0`

and store `waptdeploy.exe` directly in the GPO? That's what it's for!

If Wapt isn't already installed, the `wait` command has no effect,

Simon.

sfonteneau wrote:Why not use

waptdeploy.exe --hash=1234567890 --wait=15 --minversion=1.3.5.0

and store waptdeploy.exe directly in the GPO, that's what it's for!

How do you store it in the GPO? Do you mean in \\AD1\SYSVOL\...etc???
Because if that's the case, it's normal. Because in my infrastructure I don't place any files in the SYSVOL folders; I prefer to use a read-only share (replicated in real time on my ADs) with access only for authenticated users, and this also allows me to centralize the files used in order to apply changes more quickly.

sfonteneau wrote:If wapt isn't already installed, the wait has no effect,

Simon

The `wait` statement is supposed to define when the installation starts, right? I'm having trouble understanding its role. Can you explain it to me more? Thanks.

sfonteneau wrote: Otherwise, if I place the GPO Machine waptdeploy, it does not perform any action, but the rest of the test GPO is correctly applied (file creation test and execution of other scripts).

Perhaps the network is unavailable when the computer is started!
I had that problem for a while.

Try this: viewtopic.php?f=13&t=438&hilit=waptdepl ... t=20#p1097


Waptdeploy remains the best method

I've confirmed that it works, so I can finally tackle the software deployment part.

--wait=

https://dev.tranquil.it/wiki/WAPT_-_D%C ... PT_par_GPO