For Cloud deployments, check out the instructions in this article: How install the Windows Agent remotely (Cloud).
Requirements
Before you begin the remote install, make sure that Antivirus exceptions are properly configured (if not, you will get a pipe not ready error).
There are several ways you can deploy the agent:
1. Using the Built-in Remote Installation Dashboard
Before you start the deployment, make sure that WinRM* is enabled on the target computers and TCP port 5985 is open.
To learn more about what ports need to be enabled for Teramind, check out this Knowledge Base article.
*It’s beyond this article to describe how to use WinRM. However, Microsoft Learn has this article that can help you configure it.
Teramind has a built-in remote installation dashboard you can use. To use this dashboard, do the following:
1. Select COMPUTERS from the main menu.
2. Click the REMOTE INSTALL AGENTS button near the top-right corner of the screen. You will be taken to the Remote Agent Installation screen where you can deploy the Agent remotely:
3. Under the Select Target Computers section, you can select the computers where you want the Agent to be installed. If you have integrated Active Directory/LDAP with Teramind, you will be able to select/exclude computers by name, groups, etc. If you do not have Active Directory integration configured, then you can select the computers by IP range. You can also upload a .TXT or .CSV file containing IP addresses (1 per line).
Check out the Settings > Active Directory section to learn how to integrate Active Directory with Teramind.
4. Under Agent type, select HIDDEN or REVEALED agent.
5. For the MSI Location, if your endpoints are able to access the internet, and you have a fully trusted SSL certificate you can leave the URLs of the Agent locations to their default values. This will fetch the Agent from your local Teramind deployment. Alternatively, you can enter local URLs or network paths where the necessary Agent files (32 bit/64 bit/MSI) are located. If you are using a web location, or you do not have an SSL certificate, or you encounter any issues, using HTTPS, use HTTP.
If you have recently updated your On-Premise server, make sure to update the MSI Location links. Otherwise, it will install the old version of the Agent. To learn how to get the latest MSI links see the Getting the MSI Package below.
6. Under the Credentials section, ensure that the domain administrator credentials, and IP address of the Teramind Server are correct.
Note that, domain administrator privileges are mandatory for the silent install.
7. Under the Teramind server, enter host name or IP address of your Teramind server.
8. Click the DEPLOY button to begin the installation.
Checking the Status of Deployments / Canceling Deployments
1. From the main Computers screen, Click the DEPLOYMENTS button to see the progress of all ongoing remote deployments:
The Deployments screen show the date/time of deployment, time finished, employee, number of computers, successful and unsuccessful deployments and currently pending deployments.
2. You can click the CANCEL ALL UNFINISHED DEPLOYMENTS button to cancel all the pending deployments.
3. You can click the Refresh icon to refresh the list.
2. Using the Group Policy Object (GPO)
Group policy object (GPO) based installation requires Active Directory. You will also need the agent MSI installation package.
Getting the MSI Package
1. Click the Username near the top-right corner of the Teramind Dashboard. A pop-up menu will be displayed.
2. From the pop-up menu, click the Download Teramind Agent option. You will be taken to the agent download screen:
3. On the Install Agents screen, choose Direct file download.
4. Click the WINDOWS 8+ HIDDEN AGENT button to download the MSI package.
Deploying the Agent with GPO
There are many online articles that describe how to create GPO in case you need help.
1. You will have to pass TMROUTER parameter (and provide your Teramind server address/IP) to the msi file and therefore you need to create an mst file. For more information about this parameter and other parameters you can use, check out the Agent Installation Parameters table on the How to download and install the Teramind Agent article. You can create the mst file with a third party tool like Orca.
2. After that, please create a Group Policy Object and select ‘Advanced‘ option and specify the msi and mst files.
3. Using the Microsoft System Center Configuration Manager (SCCM/SCOM) Tool
Microsoft System Center Configuration Manager (SCCM) or System Center Operations Manager (SCOM) can be used to deploy Teramind the same way as you deploy through GPO. You need to configure your SCCM deployment package with a TMROUTER option pointing to your Teramind server. For more information about this parameter and other parameters you can use, check out the Agent Installation Parameters table on the How to download and install the Teramind Agent article.
For more information about SCCM/SCOM, please consult the Microsoft documentation.
4. Using the Microsoft Intune Endpoint Management Service
You can use Microsoft Intune to deploy the MSI package.
When configuring the Intune App Information for the hidden/stealth agent MSI, please use the command-line argument below:
TMROUTER = <IP:port> | <full_domain_name>
Example 1:
If you haven't set up any hostname for your server, you can use it's IP address and port. For example:
TMROUTER=10.23.33.44:204
Note that, port is optional and not needed if you are using the standard 443 port.
Example 2:
If you have set up a hostname for your server, use your full domain name (including any sub-domain). For example:
TMROUTER=acme.domain.com
Here's a blog article that explains how to use Intune.
5. Using the PSEXEC Tool
Before you start the deployment, make sure TCP ports 139 and 445 are open and listening on the target user's machine (not the server), allowed by firewall. To learn how to check for the open port, check out this article: How to check if Teramind IP addresses/hosts and ports are reachable.
Sysinternals psexec is a third party tool which allows to execute commands remotely. You can download it from the Microsoft site. You can use it as follows:
psexec \\<the_target_machine> -u <admin_username> -p <admin_password> -s msiexec /i <teramind.agent.latest.x64.msi> TMINSTANCE=<instance name> TMROUTER=<your Teramind server's IP/host> /qn
Replace the text inside the <> brackets with your own information. For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "c:\download\teramind_agent_v23.47.1301_x64.msi" TMINSTANCE=mycompany TMROUTER=onsite.teramind.io /qn
If the agent file name already contains the instance name (within a -i() parameter), then you don't have to specify the TMINSTANCE parameter.
For example:
psexec \\marklaptop -u marklaptop\mark -p MyP@ssword -s msiexec /i "C:\Temp\Install Test\teramind_agent_x64_s-i(teramind).msi" TMINSTANCE=mycompany TMROUTER=onsite.teramind.io /qn
For more information about the installation parameters, check out the Agent Installation/Configuration Parameters (Windows) section of the Agent installation article.
6. Enrolling: Adding Users to the Dashboard
If you have installed the Revealed Agent on a user's computer, you will need to add them to the Teramind Dashboard so that they can be tracked. This article, How to add an employee / user / computer? shows you how you can do it.
The Hidden Agent does not require this step.