# Install Agents Using GPO Scheduler

**Last Updated On:** 21 Jul 2026  
**16 minutes read**

Agents can now be installed in an Active Directory environment using the scheduler option. When the installation process is initiated with the Scheduler, it is triggered at the time specified during configuration, unlike a normal GPO script where the installation happens when a device is turned on or when a user logs in. The [Windows GPO Tool](https://www.manageengine.com/remote-desktop-management/help/device-onboarding/agent-installation-using-gpo-lightweight-tool.html) can be used to install agents via scheduler.

> **Note:**  
> If a new GPO policy is applied, the installation for existing installed agents will be skipped on all machines. The remaining agents will be installed according to the new policy.

## Advantages

- Automatically installs the agent more quickly, as it executes during the next GPO refresh cycle, unlike GPO Startup which requires computer restart.

## Disadvantages

- Complex to configure via traditional GPO editor.

> **Note:**  
> **For Remote Access Plus version 10.1.2124.1 and above, it is recommended to use exe based agent installation.**

## Steps

### How to install agent in EXE format via GPO Scheduler

1. **Download the agent package**
   - Open the server web console.
   - Navigate to **Agent -> Computers**.
   - Select the required remote office.
   - Click the **Download Agent** button.
   - Rename the file to **LocalOffice_Agent.exe**.
2. Download the script from:  
   [Download the script](https://www.manageengine.com/products/desktop-central/scripts/InstallAgentgposched.ps1)  
   Place it in a folder.
3. Open the AD machine to configure GPO.
4. GPO configuration – Creating/Provisioning Network Share.
5. Log on to the Windows Server machine as an administrator.
6. Open the Server Manager Console from the Administrative Tools menu.
7. From the Server Manager Dashboard, select **File and storage devices**.
8. Open the **Shares** tab, select **SYSVOL**, and click **Open Share**.

![Server Manager Console for agent installation in gpo scheduler](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/gposched2.webp)

9. Navigate to the scripts folder and create a new folder.
10. Paste **InstallAgentgposched.ps1** and **LocalOffice_Agent.exe** into the created folder.
11. Copy the network path (required later).  
    Network file path format:  
    **\\Domain name\SysVol\Domain name\Policies\{ID}\Machine\Scripts\Startup**

![place script and exe file in the created folder for agent installation via gpo scheduler](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/gposched3.webp)

12. **Create a GPO to identify targets for deployment**
    - Open the Group Policy Management Console (GPMC) by opening Run (Windows key + R) and typing **gpmc.msc**.
    - Right-click the target organizational unit and select **Create a GPO in this domain, and Link it here**.

![Create a GPO to identify targets for deployment](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/gposched4.webp)

13. Enter a name for the new GPO (for example, "MEDC_DC_agent_installation").
14. **Create a scheduled task to execute the deployment and installation**
    - Right-click the newly created GPO and select **Edit**.
    - Navigate to **Computer Configuration -> Preferences -> Control Panel Settings**.
    - Right-click **Scheduled Tasks**.
    - Click **New -> Immediate Task (At least Windows 7)**.

![Create a scheduled task to execute the deployment and installation of the Windows Agent](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/gposched5.webp)

15. In the New Task dialog box:
    - Enter a name and description.
    - Under **Security options**, click **Change User or Group**.
16. Enter `system`, click **Check Names**, and confirm.
17. Ensure it resolves to **NT Authority\System**.
18. Ensure:
    - **Run whether user is logged on or not** is selected.
    - **Run with the highest privileges** is selected.
    - **Configure for:** Windows Vista or Windows Server 2008.
19. In the **Actions** tab, click **New**:
    - Action: **Start a program**
    - Enter the network file path to the shared folder.
    - Provide arguments and Start in folder details.

![enter the network file path to the shared folder that was created earlier for agent installation via gpo scheduler](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/gposched6.webp)

- **Program/Script:** `powershell.exe`  
- **Add arguments:**  
  `-ExecutionPolicy Bypass -File \\DCNAME.zoho.com\SYSVOL\zoho.com\scripts\agent_reinstallation\InstallAgent.ps1`  
- **Start In:**  
  `\\DCNAME.zoho.com\SYSVOL\zoho.com\scripts\agent_reinstallation\`

- Replace the network path above with the one copied earlier.
- In the **Conditions** tab, select **Start only if the following network connection is available**, choose **Any connection**, then click **Apply** and **OK**.

> **Note:**
> - Test on a few machines before mass deployment.
> - Run `gpupdate /force` on the client machine with admin privileges to trigger the GPO task.
> - View the task result in Task Scheduler on the client machine.
> - If the scheduled task fails, remove the computer name from the network path (e.g., change `\\DCNAME.zoho.com\SYSVOL\zoho.com\scripts\agent_reinstallation\psinstallagent.ps1` to `\\zoho.com\SYSVOL\zoho.com\scripts\agent_reinstallation\psinstallagent.ps1`).

### Troubleshooting steps

If the issue persists, share the following files with support:

- **GPO result from the client machine**
  - Open Command Prompt as administrator.
  - Navigate to `C:\`
  - Run: `gpresult /h gprep.html`
  - Upload the generated `gprep.html` file from `C:\`
- **Event Logs**
  - Export and upload Application and System logs from Event Viewer.

### How to install agent via MSI format in GPO Scheduler

- Navigate to the server web console -> **Agent -> Deployment -> Agent Installation**.
- Under **Using Directory Services**, in the **GPO** tab, click **Download Agent**.
- Select the required office.
- Download the **Zip** file, extract it, and follow the steps below.

> **Note:**  
> This can be a local office or a remote office depending on which computers you want to install agents in.

### Creating/Provisioning Network Share

1. Log on to the **Windows Server** machine as an **administrator**.
2. Open the **Server Manager Console** from **Administrative Tools**.
3. From the **Server Manager Dashboard**, select **File and Storage Services**.
4. Open the **Shares** tab, click **Tasks**, and select **New Share**.

![Endpoint Central: Shares in GPO](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/shares-gpo.webp)

5. In the New Share Wizard:
   - Select **SMB Share - Quick**.
   - Click **Next**.
6. In **Shared Location**, enter the file path to the shared folder and click **Next**.

![Endpoint Central: Selecting Share Location in GPO](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/share-location-gpo.webp)

7. Enter a **share name** and optional description.
8. The wizard creates local and remote file paths.
9. Click **Next**.
10. In **Other Settings**, accept defaults and click **Next**.

![Endpoint Central: Configuring other settings in GPO](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/other-settings-gpo.webp)

11. Accept default permissions and click **Next**.
12. Review selections and click **Create**.
13. Ensure the share is accessible (recommended for everyone).
14. Right-click the share and select **Open Share**.
15. Download the agent from **Agent -> Agent Installation -> GPO -> Download Agent**.
16. Copy the script from:  
    [Agent Installation Script](https://www.manageengine.com/products/desktop-central/installAgentC.vbs)  
    Save it as **installagentscript.vbs**.
17. Place the following files in the share:
    - **UEMSAgent.msi**
    - **UEMSAgent.mst**
    - **DMRootCA.crt**
    - **DMRootCA-Server.crt**
    - **installagentscript.vbs**

Include **DCAgentServerInfo.json** only if the build version is 10.1.2124.1 and above.

> **Note:**  
> Capture and store the full network file path (not the local path) for later steps.

![Endpoint Central: Agent Installable Path](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/agent-path.webp)

### Create a GPO to identify targets for deployment

1. Open **GPMC** (Run -> `gpmc.msc`).
2. Right-click the target organizational unit and select **Create a GPO in this domain, and Link it here**.

![Endpoint Central: Creating GPO for agent installation](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/creating-gpo.webp)

3. Enter a name (e.g., "Desktopcentral_agent_install").

> **Note:**  
> By default, the GPO applies to all authenticated users and computers in the selected domain.

4. Modify **Security Filtering** if you need to change deployment scope.

> **Note:**  
> You can modify the scope of computers by changing the Security Filtering values.

### Create a scheduled task to execute the deployment and installation of the Windows Agent

1. Right-click the new GPO and select **Edit**.
2. Navigate to **Computer Configuration -> Preferences -> Control Panel Settings -> Scheduled Tasks**.
3. Click **New -> Immediate Task (At least Windows 7)**.

![Endpoint Central: Creating new task in GPO for agent installation](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/new-task-gpo.webp)

4. Enter a **Name** and optional description.
5. Under **Security**, click **Change User or Group**.
6. Enter `system`, click **Check Names**, and confirm.
7. Ensure it resolves to **NT Authority\System**.
8. Ensure:
   - Run whether user is logged on or not
   - Run with highest privileges
   - Configure for: Windows Vista or Windows Server 2008
9. Click the **Actions** tab and click **New**.
10. Configure:
    - **Action:** Start a program
    - **Program/script:**  
      `\\computer_name\DCAgentShare\installagentscript.vbs`
    - **Add arguments:**  
      - `UEMSAgent.msi UEMSAgent.mst` (for versions below 10.0.653)  
      - `UEMSAgent.msi UEMSAgent.mst DMRootCA.crt DMRootCA-Server.crt` (for versions after 10.0.653)
    - **Start in:**  
      `\\computer_name\DCAgentShare\`

![Endpoint Central: Defining action for new task in gpo for agent installation](https://cdn.manageengine.com/sites/meweb/images/remote-desktop-management/help/device-onboarding/actions-gpo.webp)

11. In the **Conditions** tab, select **Start only if the following network connection is available** and choose **Any connection**.
12. Click **OK**.

You have now successfully initiated agent installation using GPO Scheduler.