McAfee EPOLICY ORCHESTRATOR 4.5 Product Manual page 71

Distributing Agents to Manage Systems
Installing the McAfee Agent
Installing the agent with login scripts
Use this Windows only task to set up and use network login scripts to install the agent on
Windows systems as they log on to the network.
Using network login scripts is a reliable method to make sure that every system logging on to
your network is running an agent. You can create a login script to call a batch file that checks
if the agent is installed on systems attempting to log on to the network. If no agent is present,
the batch file installs the agent before allowing the system to log on. Within 10 minutes of being
installed, the agent calls in to the server for updated policies and ePO tasks, and the system is
added to the System Tree.
This method is appropriate when:
• Domain names or sorting filters are assigned to the segments of your System Tree.
• You already have a managed environment and want to ensure that new systems logging
on to the network become managed as a result.
• You already have a managed environment and want to ensure that systems are running a
current version of the agent.
Before you begin
• McAfee recommends first creating segments of your System Tree that use either network
domain names or sorting filters that add the expected systems to the desired groups. If you
don't, all systems are added to the Lost&Found group, and you must move them manually.
• Consult your operating system documentation for writing login scripts. The details of the
login script depend on your needs. This task uses a basic example.
• Create a batch file (ePO.bat) that contains commands you want to execute on systems when
they log on to the network. The content of the batch file depends on your needs, but its
purpose is to check whether the agent has been installed in the expected location and, if
not, run FramePkg.exe to install the agent. Below is a sample batch file that does this.
IF EXIST "C:\Program Files\McAfee\Common Framework\FRAMEWORKSERVICE.EXE" GOTO END_BATCH
\\MyServer\Agent\UPDATE$\FRAMEPKG.EXE /INSTALL=AGENT
:END_BATCH
NOTE: The installation folders for your distribution might be different than in this example,
depending on where you have specified to install the agent.
This example checks:
• The default installation folder for an agent file and, if not present, installs the new agent.
Task
For option definitions, click ? in the interface.
1 Copy the agent installation package, FramePkg.exe, from your ePO server to a shared
folder on a network server, where all systems have permissions.
Systems logging on to the network are automatically directed to this folder, to run the
agent installation package and install the agent. The default location for the agent installation
packages for Windows is:
Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409\FramePkg.exe
2 Create a custom agent installation package with embedded administrator credentials, which
are required to install the agent on the system.
McAfee ePolicy Orchestrator 4.5 Product Guide
C:\Program Files\McAfee\ePolicy
71