37
ePolicy Orchestrator
®
3.6 Walkthrough Guide
Deploying the Agent and Products
Distributing agents
4
To deploy the agent from the ePolicy Orchestrator console or install a custom agent
installation package on systems running Windows XP Home, you must enable
network access.
To enable network access on systems running Windows XP Home:
a
Select
Start | Control Panel
.
b
Click
Performance and Maintenance
.
c
Click
Administrative Tools
.
d
Select
Local Security Policy
. The
Local Security Settings
application window appears.
e
In the console tree under
Security Settings | Local Policies
, select
Security Options
. The
available policies appear in the details pane.
f
Select
Network access: Sharing and security model for local accounts
to open the
Network
access
dialog box.
g
Select
Classic - local user authenticate as themselves
, then click
OK
. Local users are
able to authenticate and access resources on the system from the network.
Installing the agent with login scripts
Using network login scripts is a very reliable and popular way to make sure that every
system logging onto your network is running an agent. You can create a login script to
call a batch file that checks if the agent is installed on systems attempting to log onto
the network. If no agent is present, the batch file can install the agent before allowing
the system to log on. Within ten minutes of being installed, the agent calls into the
server for updated policies, and the system is added to the Directory.
When to use this method
This is a desirable method to use when:
You assigned IP sorting filters or NT domain names when creating the segments of
your Directory.
You already have a managed environment and you want to ensure that new systems
logging onto the network become managed as a result.
You already have a managed environment and you want to ensure systems are
running a current version of the agent.
Best practices information
McAfee recommends that you first create segments of your Directory that use either
network domain names or IP address filters that add the expected systems to the
desired sites and groups when the agents call into the server for the first time
automatically. If you don’t, all systems are added to the Lost&Found group and you
must move them later manually.
Especially when distributing agents to systems in a very large network, creating a
Directory that uses some automated sorting method
before
installing agents with login
script can save valuable time.
The details of the login script used to install the agent can vary, depending on your
needs. Consult your operating system documentation for more details on how to write
login scripts.
Summary of Contents for ePolicy Orchestrator
Page 2: ......
