How to Install Endpoint Central agents using GPO light-weight tool?

Windows GPO is a powerful and versatile tool. Endpoint Central agent can be installed, uninstalled or migrated using the GPO light-weight tool.

Note: Admin privileges are required for installing the agent using the GPO tool.

Follow the steps given below to create a Group policy and link it with OUs and Domains:


1. Select the account details

    • Open the Domain Controller of the required AD in which the GPO needs to be configured.
    • To download the GPO tool click here.  
    • Execute the Tool As an administrator
    • Select "Continue with above details" and click next.
    • If you encounter an error in fetching the domain or domain controller name or if you would like to execute the tool from another machine instead of the domain controller machine, select the enter details manually option.

To get the domain or OU Distinguished name, follow these steps:

    • Under Administrative tools, open the active directory users and computers.
    • Under View, enable Advanced Features.
    • Right click on the OU / Domain and Select Properties -> Attribute Editor -> distinguishedName -> View


2. Choose the required action

    • Select the required action ( Installation \ Uninstallation \Migration)

For the agent installer EXE, follow these steps:

    • Open the Endpoint Central server web console.
    • Navigate to Agent -> Computers
    • Select the required remote office
    • Click Download Agent and add the downloaded file in the tool.

Note: For agent uninstallation and migration use the AgentCleanupToolClient.exe. Follow the steps given in this document to generate the Cleanup tool.

3. Choose the Policy details

    • Enter the Name of the GPO [eg : MEECAgentInstall ] -> Enter the policy type [Startup or scheduler ] -> Select the Script type [powershell script is always recommended]


4. Link the GPO

    • To apply policy to entire domain, select "Entire Domain".
    • To apply the policy to a specific OU , enter the OU distinguished names and click next. (To obtain the OU distinguished name, refer to the first step.)

5. Confirm the details

    • Confirm the policy details and click next
    • The policy has been successfully created

Note: If the start up policy is configured, restart the endpoints and check the status and if the scheduler policy is created it will be applied in the endpoints within 90 mins.

To test the policy in a machine Immediately after creation, follow the steps below:

    • Open the client machine -> Command prompt as an admin and execute the command gpupdate /force
    • Once the policy update is completed restart the machine if the "Start-up" policy is configured.
    • For "Immediate Task" policy will be applied once the policy update is completed.