Pushing MSI from Active Directory - Step-by-Step Guide

Pushing MSI from Active Directory - Step-by-Step Guide

KB ID: 115066
Bulk Installation of BDRSuite Endpoint Agents
This knowledge base article provides step-by-step instructions for pushing the BDRSuite Endpoint Agents MSI files from Active Directory. The process involves creating a CSV file, importing it to the BDRSuite Backup Server web console, and configuring Group Policy Object (GPO) to deploy the MSI files to the desired endpoint hosts.
Step 1: Creating a CSV File
1. Create a new spreadsheet and enter the IP address or DNS name of each endpoint host in the horizontal cells.   
Note: Do not enter the IP address or DNS name in vertical cells.

2. Save the file in comma-separated format (CSV).
Step 2: Importing the CSV File to BDRSuite Backup Server Web Console
1. Log in to the BDRSuite Backup Server web console.

2. Navigate to the "Endpoints" tab and choose "Add Microsoft Windows" or "Add Linux" as per your requirement.

3. Click on the respective option to add endpoints and select to import from the CSV file.

4. Enter or browse the CSV file location, click "Save," and proceed with the import.

Step 3: Download the MSI Builds
Download the MSI file from the same page where the CSV file was imported. Scroll down to find the "Steps To Add Host (Windows/Linux) through CSV File" message and locate the option to download the MSI file.


Step 4: Create an MSI with a Property Value for Passing Installation Arguments
1. Download the Windows SDK for your operating system from the machine where you will create the MSI with property value.

2. Mount the ISO file and run the setup.exe to install the Windows SDK.

3. Choose the MSI tool during the installation process.

4. Once installed, navigate to the location "C:\Program Files (x86)\Windows Kits\10\bin\10.0.xxx.x\x86" (location may vary depending on the Windows SDK version).

5. Run the ORCA MSI installer.
6. Open the ORCA application from the Start menu.

7. Open the "BDRSuiteDelegationService5300.msi" in ORCA and navigate to the property table of the MSI.

8. Change the "ISENDPOINTENABLED" value from "0" to "1" and the "BUILDTYPE" value from "11" to "14".


9. Add a new property table named "BACKUPSERVERINFO" and set the BDRSuite Backup Server's IP address or DNS name as the value.

10. Save the changes.
Step 5: Copy the MSI File to a Shared Folder
Copy the downloaded MSI file to a newly created folder and share it by providing read permissions for the "Domain Computers" account.

Step 6: Open or Install Group Policy Management
  1. Open Group Policy Management by going to 'Start' > 'Administrative Tools' > 'Group Policy Management.'
  2. To install Group Policy Management, open the command prompt with administrative privileges and type the command: ServerManagerCmd -install gpmc
  3. Once installed, open Group Policy Management as described above.

Step 7: Create a New GPO
Create a new Group Policy Object (GPO) and provide a name for it by Navigating to Domains -> <yourdomain> -> Group Policy Objects:
1. Click on "Action" and choose "New" to create a new Group Policy Object (GPO).
   
2. Provide a name for the GPO to be created in the dialog box.   
3. Once created, the new GPO will be listed under 'Group Policy Objects'.
   
4. In the navigation pane, click on the newly created GPO.
5. In the right pane, find the box titled 'Security Filtering' under the 'Scope' tab.
6. Click on 'Authenticated Users' under 'Security Filtering' and then click 'Remove'.

 
 Note: This step ensures the policy is applied only to a specific set of users (as mentioned in the step below).
7. Click 'Add' to specify the users, computers, or groups you want the GPO to be applied to.
   
Step 8: Add MSI Builds
  1. Right-click on the newly created GPO and click 'Edit.'
  2. A dialog box with the 'Group Policy Management Editor' will open. Navigate to 'Computer Configuration' -> 'Policies' -> 'Software Settings' -> 'Software Installations' in the navigation pane.
  3. Right-click on the empty pane on the right and select 'New' -> 'Software Package.'
  4. In the window that pops up, navigate to the share created earlier (Under Step: 5) and select the MSI client.
Note: Type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\<file server>\<share>\<file name>.msi. Avoid adding the MSI from the local drive; use only the share path.
5. Click the 'Assigned' bubble and click OK.
6. Now the "BDRSuiteDelegationService5300.msi" will be listed in the right-side wizard.
7. Navigate to Computer Configuration -> Policies -> Administrative Templates -> System -> Group Policy and go to the option "Configure software Installation policy processing."
8. Double-click it, enable it, and choose the option "Allow processing across a slow network connection," then click apply.

9. Now go to the option "Specify startup policy processing wait time" and double-click it.
10. Enable it and set the time value as 120 (default value).
11. Close the Group Policy snap-in, click OK, and then close the Active Directory Users and Computers snap-in.
12. Re-open the Group Policy Management.
13. Right-click on the organization unit for which you are going to install the Endpoint MSI and select "Link an existing GPO."           
14. Select the newly created GPO.  
15. Now the selected GPO will be listed on the right side of the wizard.
16. Now close the GPO wizard and update the GPO by opening the command prompt with administrator privilege and run the command "gpupdate /force."
17. Now the MSI will be installed into the Endpoint host when the user logs in.
Note: Not applicable for BDRSuite Client for VMware/Hyper-V/Windows/Linux.