Deployment and installation using group policies

The following instructions show you the steps required to deploy and install the baramundi Management Agent using group policies.

1. Preparation

  • The desired endpoints must be located in an Organizational Unit (OU) of an Active Directory environment to which a Group Policy Object (GPO) can be applied.
  • A share must be created in the Active Directory, for example: \\SERVER\Software\baramundi\baramundiProactiveAgent.exe
  • The Proactive Agent installation file must be stored in the path with the share (download instructions: Manage Endpoints).

2. Creating the installation script

Create a PowerShell script as follows:

$exe = "\\SERVER\Software\baramundi\baramundiProactiveAgent.exe"
$guid = "{C28BCA2F-8E17-4A04-95A3-2A92A9450EB8}"
$uninstall = "C:\ProgramData\Caphyon\Advanced Installer\$guid\baramundiProactiveAgent.exe"
# Cancel if already installed
if (Test-Path $uninstall) { exit 0 }Start-Process $exe -ArgumentList '/exenoui /qn ENROLLMENTTOKEN=eyJhbGc...ME3dUnd' -Waitexit 0

Note:
Make sure to cut out the enrollment token from the installation command and store it in the PowerShell script (instructions for creating and viewing: Manage Endpoints).

3. Create GPO

  1. Open the Group Policy Management Console (Group Policy Manager).
  2. Create a new GPO and link it to the desired OU, for example: Software - baramundi Proactive Agent.
  3. Path: Computer Configuration > Policies > Windows Settings > Scripts (Startup)
  4. Add...
    Select the UNC path to the PowerShell script created in step 2, for example: \\SERVER\Software\baramundi\Install-baramundi.ps1

4. Enable PowerShell execution (only if not already enabled)

  1. Navigate to Computer Configuration > Policies > Administrative Templates > Windows Components > Windows PowerShell > Turn on Script Execution and set the script execution to the value Enabled (Allow all).
  2. Navigate to Scripts > Run Windows PowerShell scripts first and also set the function to Enabled.

5. Uninstall command (optional)

You have the option of uninstalling the Proactive Agent using the Group Policies and PowerShell, as described above. The uninstall command required for this is:

C:\ProgramData\Caphyon\Advanced Installer\{C28BCA2F-8E17-4A04-95A3-2A92A9450EB8}\baramundiProactiveAgent.exe /x {C28BCA2F-8E17-4A04-95A3-2A92A9450EB8} /qn AI_UNINSTALLER_CTP=1



Last updated: 10/7/26, 1:21 PM