---
title: "Deployment and installation using group policies"
url: "https://help.baramundi.cloud/en/article/deployment-and-installation-using-group-policies"
language: "en"
last_updated: "2026-10-07T13:21:53.784Z"
---

# Deployment and installation using group policies

The following instructions show you the steps required to deploy and install the baramundi Management Agent using group policies.

#### **1\. Preparation**

-   The desired endpoints must be located in an Organizational Unit (OU) of an Active Directory environment to which a Group Policy Object (GPO) can be applied.
-   A share must be created in the Active Directory, for example: \\\\SERVER\\Software\\baramundi\\baramundiProactiveAgent.exe
-   The Proactive Agent installation file must be stored in the path with the share (download instructions: [Manage Endpoints](https://docs-staging.baramundi.com/helpsetid=m_t_administration&externalid=proactive-hub_administration_endpoint-management&Language=en-us)).

#### **2\. Creating the installation script**

Create a PowerShell script as follows:

```
$exe = "\\SERVER\Software\baramundi\baramundiProactiveAgent.exe"
$guid = "{C28BCA2F-8E17-4A04-95A3-2A92A9450EB8}"
$uninstall = "C:\ProgramData\Caphyon\Advanced Installer\$guid\baramundiProactiveAgent.exe"
# Cancel if already installed
if (Test-Path $uninstall) { exit 0 }Start-Process $exe -ArgumentList '/exenoui /qn ENROLLMENTTOKEN=eyJhbGc...ME3dUnd' -Waitexit 0
```

**Note:**

Make sure to cut out the enrollment token from the installation command and store it in the PowerShell script (instructions for creating and viewing: [Manage Endpoints](https://docs-staging.baramundi.com/helpsetid=m_t_administration&externalid=proactive-hub_administration_endpoint-management&Language=en-us)).

#### **3\. Create GPO**

1.  Open the Group Policy Management Console (Group Policy Manager).
2.  Create a new GPO and link it to the desired OU, for example: **Software - baramundi Proactive Agent**.
3.  Path: **Computer Configuration > Policies > Windows Settings > Scripts (Startup)**
4.  **Add...**  
    Select the UNC path to the PowerShell script created in step 2, for example: \\\\SERVER\\Software\\baramundi\\Install-baramundi.ps1

#### **4\. Enable PowerShell execution** (only if not already enabled)

1.  Navigate to **Computer Configuration > Policies > Administrative Templates > Windows Components > Windows PowerShell > Turn on Script Execution** and set the script execution to the value **Enabled (Allow all)**.
2.  Navigate to **Scripts > Run Windows PowerShell scripts first** and also set the function to **Enabled**.

#### **5\. Uninstall command** (optional)

You have the option of uninstalling the Proactive Agent using the Group Policies and PowerShell, as described above. The uninstall command required for this is:

```powershell
C:\ProgramData\Caphyon\Advanced Installer\{C28BCA2F-8E17-4A04-95A3-2A92A9450EB8}\baramundiProactiveAgent.exe /x {C28BCA2F-8E17-4A04-95A3-2A92A9450EB8} /qn AI_UNINSTALLER_CTP=1
```