Deploying the Client

You can deploy the client using methods other than the Ivanti Device and Application Control Client Deployment tool, depending upon your environment and company policies.

Client deployment methods, in addition to the Ivanti Device and Application Control Client Deployment tool, include using:

• A ghost image.
• Windows Group Policy.
• Third-party software deployment tools.

You can implement a computer-based group policy for all computers in a domain. Group policies can be applied to sites, domains, or Active Directory organizational units (OU), based on individual system requirements and the types of computers in the groups.

Prerequisites:

Before using a third-party software deployment tool to deploy clients, you must:

1. Create a deployment package using the Ivanti Device and Application Control Client Deployment tool. Refer to the Ivanti Device and Application Control help for instructions about creating deployment packages.
2. Copy the entire deployment package folder to a local directory on the server that will be used to deploy the client. This directory should include the *.msi installation file and the sx-public.key public key file.
   The following procedure demonstrates how to apply Windows^® group policy for deploying clients.

Execution of this procedure may vary according to individual operating system requirements. For the purposes of this example, the operating system reference is Windows 2003 Server.

To deploy the client with Windows Group Policy:

1. Select Start > All Programs > Administrative Tools > Active Directory Users and Computers.
   The Active Directory Users and Computers dialog opens.
2. In the console tree, right-click the DomainName, where the DomainName is the name of your domain.
3. Click Properties.
4. Select the Group Policy tab.
5. Click New to create a new group policy.
6. Click Edit.
7. Under Computer Configuration, expand the Software Settings folder.
8. Right-click Software Installation.
9. Select New > Package.
10. In the Open dialog, type the full Universal Naming Convention (UNC) path of the shared installer package that you want to install using the \\file server\share\client.msi format.

Important: Do not use Browse to access the location. Make sure that you use the UNC path to the shared installer package.

11. Click Open.
12. Click Advanced.
13. Select the Modifications tab.
14. Point to the MST file in the package. Make sure the path is in UNC format.
15. Click OK.
    The package is listed in the right pane of the Group Policy window.
16. Close the Group Policy tab.
17. Click OK.
18. Close the Active Directory Users and Computers dialog.
    When the client computer restarts, the managed software package is automatically installed.

You can use a third-party software deployment tool to deploy the Ivanti Device and Application Control client for a group of computers in your network.

Prerequisites:

Before using a third-party software deployment tool to deploy clients, you must:

1. Create a deployment package using the Ivanti Device and Application Control Client Deployment tool. Refer to the Ivanti Device and Application Control help for instructions about creating deployment packages.
2. Copy the entire deployment package folder to a local directory on the server that will be used to deploy the client. This directory should include the *.msi installation file and the sx-public.key public key file.

To deploy the client with other tools:

1. Open the third-party tool.
2. Run the following command-line in the appropriate entry: Client.mst
3. Deploy the client using the third-party tool.
   The third-party software deployment tool installs the client on the specified target computers.