Installing The Agent With Login Scripts - McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual

®
ePolicy Orchestrator 3.6 Walkthrough Guide

Installing the agent with login scripts

To deploy the agent from the ePolicy Orchestrator console or install a custom agent
installation package on systems running Windows XP Home, you must enable
network access.
To enable network access on systems running Windows XP Home:
Start | Control Panel
a Select
Performance and Maintenance
b Click
Administrative Tools
c Click
Local Security Policy
d Select
e In the console tree under
available policies appear in the details pane.
Network access: Sharing and security model for local accounts
f Select
access
dialog box.
Classic - local user authenticate as themselves
g Select
able to authenticate and access resources on the system from the network.
Using network login scripts is a very reliable and popular way to make sure that every
system logging onto your network is running an agent. You can create a login script to
call a batch file that checks if the agent is installed on systems attempting to log onto
the network. If no agent is present, the batch file can install the agent before allowing
the system to log on. Within ten minutes of being installed, the agent calls into the
server for updated policies, and the system is added to the Directory.
When to use this method
This is a desirable method to use when:
You assigned IP sorting filters or NT domain names when creating the segments of
your Directory.
You already have a managed environment and you want to ensure that new systems
logging onto the network become managed as a result.
You already have a managed environment and you want to ensure systems are
running a current version of the agent.
Best practices information
McAfee recommends that you first create segments of your Directory that use either
network domain names or IP address filters that add the expected systems to the
desired sites and groups when the agents call into the server for the first time
automatically. If you don't, all systems are added to the Lost&Found group and you
must move them later manually.
Especially when distributing agents to systems in a very large network, creating a
Directory that uses some automated sorting method before installing agents with login
script can save valuable time.
The details of the login script used to install the agent can vary, depending on your
needs. Consult your operating system documentation for more details on how to write
login scripts.
.
.
.
Local Security Settings
. The application window appears.
Security Settings | Local Policies
, then click
37
Deploying the Agent and Products
Distributing agents
Security Options
, select . The
Network
to open the
OK
. Local users are
4