Top
Systemwalker Desktop Keeper Installation Guide
FUJITSU Software

2.6.4 Installation using Active Directory Group Policy

Note

  • In this procedure, the client (CT) is extracted using the startup script for the Active Directory group policy so the client (CT) will be installed with the SYSTEM account.

  • This procedure supports for new installations only.

  • Execute this procedure as a user with administrator privileges.

  • The installation script contains a non-encrypted password. It is the responsibility of the user to manage the installation script.

Follow the procedure below to use the Active Directory group policy to install a Systemwalker Desktop Keeper client (CT) to the machine to be managed. Refer to "1.2.5 Determine How to Install Client (CT)" for an overview of the installation method.

  1. Create an installation configuration file

  2. Edit the installation script

  3. Register the group policy

  4. Check the installation results

  5. Cancel the group policy

2.6.4.1 Create an Installation Configuration File

Create an installation configuration file. Refer to "Create installation settings file" for details.

Note

  • Create the installation configuration file with the default name "InstConf.ini".

2.6.4.2 Edit the Installation Script

Edit the installation script in accordance with the environment.

File name

distributeDTKCT.bat

Character encoding

The character encoding used is Shift JIS.

Format

The sections to be edited are as follows.

set SHARE_DIR=uncPathForTheSharedFolderContainingSetupDotExe
set SHARE_ID=userIdToAccessFolderSpecifiedInShareDirEnvVar
set SHARE_PW=passwordOfUserIdSpecifiedInSharIdEnvVar

Parameters

The table below explains the values set for the installation script.

No.

Environment variable

Default value

Description

1

SHARE_DIR

None

UNC path for the shared folder containing Setup.exe (the command for installing clients (CTs)).

This environment variable is required.

This value will be used in "2.6.4.3 Register the Group Policy".

2

SHARE_ID

None

User ID used to access the folder specified in SHARE_DIR.

Specify a user with write permission to the folder.

3

SHARE_PW

None

Password of the user specified in SHARE_ID.

Example

Example of edited installation script is shown below:

set SHARE_DIR=\\192.168.10.10\share
set SHARE_ID=user1@domain.local
set SHARE_PW=hogehoge1!

Note

  • If SHARE_ID and SHARE_PW are omitted, the local SYSTEM account will be used to access SHARE_DIR.

  • If connection to SHARE_DIR using SHARE_ID and SHARE_PW fails, the local SYSTEM account will be used to access SHARE_DIR.

2.6.4.3 Register the Group Policy

This section explains how to register the group policy to the Active Directory.

It is recommended to register the group policy for a small number of users and perform extraction tests first.

If the domain controller runs Windows Server 2008 or Windows Server 2012

  1. Click Start > Administrative Tools > Group Policy Management.

  2. In the Group Policy Management window, click Forest: domain > Domains > domain > Group Policy Objects.

  3. Create a Group Policy Object in the group where the computer on which the CT will be extracted exists.
    If you are using an existing GPO, there is no to create another one.

  4. Right-click the GPO to be used, and click Edit.

  5. In the Group Policy Management Editor window, click Computer Configuration > Windows Settings > Scripts (Startup/Shutdown).
    In the right pane, click Startup and click Properties.

  6. In the Startup Properties window, click Add.
    In the Add a Script dialog box, enter "distributeDTKCT.bat" in Script Name, and click OK.

  7. Copy "distributeDTKCT.bat" to the folder displayed by selecting Show Files.

  8. Copy the installation configuration file and Setup.exe (the command for installing clients (CTs)) to the folder specified for the SHARE_DIR environment variable in the installation script.
    Setup.exe is located in the win32\DTKClient folder of the setup disk.

  9. In the Startup Properties dialog box, click OK to enable the settings.

  10. In PCs where the group policy is applied, the CT will be automatically installed during startup.

Note

In PCs on which the CT is extracted, the operating system must be restarted after installation is completed.

2.6.4.4 Check the Installation Results

Use one of the following procedures to check if the CT extraction was completed normally..

If installation did not complete normally, refer to the installation result log and take appropriate action.

2.6.4.5 Cancel the Group Policy

Follow the procedure below to check if installation of the extracted client (CT) was completed successfully.

Once CT extraction is completed, cancel the group policy.

If the domain controller runs on Windows Server 2008 or Windows Server 2012

  1. Click Start > Administrative Tools > Group Policy Management.

  2. In the Group Policy Management window, click Forest: domain > Domains > domain > Group Policy Objects.

  3. Right-click the GPO of the group in which the client (CT) is extracted, and click Edit.

  4. In the Group Policy Management Editor window, click Computer Configuration > Windows Settings > Scripts (Startup/Shutdown).
    In the right pane, right-click Startup and click Properties.

  5. In the Startup Properties window, click "distributeDTKCT.bat" and click Remove.

  6. Remove "distributeDTKCT.bat" from the folder displayed by clicking Show Files.

  7. Delete the installation configuration file and Setup.exe (the command for installing clients (CTs)) from the folder specified for the SHARE_DIR environment variable in the installation script.

  8. In the Startup Properties dialog box, click OK to enable the settings.

  9. Remove the GPO selected in step 3.
    If the GPO is used for other purposes, it is not necessary to remove it.