Some products of SECUDRIVE USB embed copy protection features. To use these products, a user must install an agent to protect a file from leaking onto the PC. If a user uses Windows 7 or Windows Vista, the user needs to run the login program of the USB flash drive with administrator privileges if it is the first time using the product on the PC. By doing so, the user can install the agent.
If a user has a user right for the PC on the Microsoft’s Active Directory environment, the user is not allowed to install a program by oneself. In this case, the administrator of the active directory (AD) can distribute the MSI package of the agent installation file to each PC, no longer requiring users to have administrator privileges to run the login program.
This post will describe how to distribute the agent installation file using the AD server.
Distributing the MSI agent installation file using the AD server
1. Copy “SecuDrive Agent.msi” file to a folder in the AD server and share the folder. This folder should be accessible from all the PCs that use the AD server.
2. Run “Active Directory Users and Computers”.
3. Select ‘Properties’ of Organizational Unit(OU) and click ‘Group Policy’ tab.
Note: : You should move the PC where the MSI file should be installed or the ID to this OU. Or, you should configure the distribution of the MSI file per OU.
4. Click ‘New’ or ‘Add’ to create a new Group Policy.
5. Click the ‘Edit’ button and edit the group policy.
6. In the tree of the left side, click ‘Computer Configuration > Software Settings’ and on the popup menu, click New > Package’.
7. In the file browser, set the path of the SecuDrive Agent.msi to [Universal Naming Convention (UNC)] format. The path will be displayed as follows.
Warning : To set the MSI installation file, you should not set a path in the local hard disk drive(C: or D:), but set the installation file in the shared folder.
[server name] [Shared Dir]SecuDrive Agent.msi
8. In the ‘Deploy Software’ dialogue window, select ‘Assigned’ and click the OK’ button. The MSI file will be displayed in the right side.
9. Select the MSI file and select ‘Properties’ and click [Deployment] tab.
10. Click the “Advanced……” button and click the box of ‘Ignore language when deploying this package’ and close the window.
11. In the editing browser of Group Policy, enable the following settings.
- Computer Configuration > Administrative Templates > System > Logon > Always wait for the network at computer startup and logon
- Computer Configuration > Administrative Templates > System > Group Policy > Software Installation policy processing
- Computer Configuration > Administrative Templates > Windows Components > Windows Installer > Always Install with elevated privileges
- User Configuration > Administrative Templates > Windows Components > Windows Installer > Always Install with elevated privileges