For On-Premise deployments, check out the instructions in this article: How install the Windows Agent remotely (On-Premise).
Requirements
Before you begin the remote install, make sure that Antivirus exceptions are properly configured (if not, you will get a pipe not ready error).
There are several ways you can deploy the agent:
1. Using the Group Policy Object (GPO)
Group policy object (GPO) based installation requires Active Directory. You will also need the agent MSI installation package.
Getting the MSI Package
1 Click the Username near the top-right corner of the Teramind Dashboard. A pop-up menu will be displayed.
2. From the pop-up menu, click the Download Teramind Agent option. You will be taken to the Download Agent screen:
3. Click the Stealth Agent tab.
4. Click the Download Windows installer button to download the MSI package.
Deploying the Agent with GPO
There are many online articles that describe how to create a GPO in case you need help.
1. For more information about any additional parameters you can use, check out the Agent Installation Parameters table on the How to download and install the Teramind Agent article.
2. After that, please create a Group Policy Object and select ‘Advanced‘ option and specify the .msi file.
2. Using the Microsoft System Center Configuration Manager (SCCM/SCOM) Tool
Microsoft System Center Configuration Manager (SCCM) or System Center Operations Manager (SCOM) can be used to deploy Teramind the same way as you deploy through GPO.
For more information about SCCM/SCOM, please consult the Microsoft documentation.
3. Using the Microsoft Intune Endpoint Management Service
You can use Microsoft Intune to deploy the MSI package.
When configuring the Intune App Information for the hidden/stealth agent MSI, please use the command-line argument below:
TMINSTANCE=<customer>
Here <customer> is taken from your Teramind URL. For example acme.teramind.co would use:
TMINSTANCE=acme
Here's a blog article that explains how to use Intune.
4. Using the PSEXEC Tool
Before you start the deployment, make sure ports 139 and 445 are open and listening on the target user's machine (not the server), allowed by firewall (you can check it with telnet from the system you're deploying from).
Sysinternals psexec is a third party tool which allows you to execute commands remotely. You can download it from the Microsoft site. You can use it as follows:
psexec \\<target_machine> -u <admin_username> -p <admin_password> -s msiexec /i <MSI url> TMINSTANCE=<instance> /qn
Replace the text inside the <> brackets with your own information. For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "https://getteramind.com/cloud-mycompany/1731416209/hidden/win/24.41.2131/0ca1ee5b4060313fc6969fe86b300bdb75ad56a2/teramind_agent_x64_s-i(__261e84a5119d483d322c3a398d159d493fc6b803).msi" TMINSTANCE=mycompany /qn
Notes:
1. Note that the installation file you specify in the <MSI url> has to be accessible from the remote computer the Agent is being installed on. You can get the <MSI url> from the Agent Download screen, by right-clicking the Download Windows Installer button:
2. The <instance> can be the instance name or instance ID. For example, “mycompany”, or “__b89a5c47a3cdd45682c21d3f764218c2aed88bd5”. If the Agent file name already contains the instance name/ID within a -i() parameter, and you didn't include the /qn parameter (silent install), then you don't have to specify the TMINSTANCE parameter.
For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "https://getteramind.com/cloud-mycompany/1731416209/hidden/win/24.41.2131/0ca1ee5b4060313fc6969fe86b300bdb75ad56a2/teramind_agent_x64_s-i(__261e84a5119d483d322c3a398d159d493fc6b803).msi"
For more information about the installation parameters, check out the Agent Installation/Configuration Parameters (Windows) section of the Agent installation article.
Enrolling: Adding Users to the Dashboard
If you have installed the Revealed Agent on a user's computer, you will need to add them to the Teramind Dashboard so that they can be tracked. This article, How to add an employee / user / computer? shows you how you can do it.
The Hidden Agent does not require this step.